ONGuard Core Training

OnGuard-Core
OnGuard-Core 7.4 EMEA Feb 2018

Legal Notice – please read
THIS PRESENTATION AND ITS CONTENT ARE STRICTLY
CONFIDENTIAL and may not be copied, disclosed or otherwise
disseminated either in whole or in part without UTC Fire & Security BV’s
(UTCFS) prior written approval.
This document is supplied for training purposes only. It does not constitute an
offer to supply any products or services or a binding contract thereto, nor
does it give rise to legally enforceable rights or obligations.
Training services provided by UTCFS are subject to the terms and conditions
of the agreement UTCFS has with your company.
All information is delivered on an “as is” basis and all representations and
warranties, express or implied, are hereby disclaimed, including, without
limitation, that the information is accurate or reliable for any purpose
whatsoever.”
2
2
Introductions
Who?
– You and your employer
Where?
– Where are you from
What?
– What’s your role and experience with regard to
access control systems?
Why?
– What do you hope to achieve from this training?
3
EMEA OnGuard-Core Agenda
DAY 1 TOPICS – Configuration of Alarm Panels
– Certification – Configuration of Card (Badge) Format
– OnGuard Introduction – Configuration of Readers
– OnGuard Databases DAY 4 TOPICS
– OnGuard Software Installation – Alarm Acknowledgement
– OnGuard Services – Introduction to Monitoring Zones
– SQL Server Management Studio – Access Levels and Access Groups
– Database Backups – Cardholder Configuration
•
– Database Translation Utility Badge Designer
• Badge types
– Thick Clients, Upgrades and Maintenance • Managing Cardholders and their Badges
•
– Installation Tips FormsDesigner Lite
– Navigation – Basic Alarm Configuration

– Timezone Reader Mode
DAY 2 TOPICS
– Action Types and Groups
– System-Wide configuration
– Scheduler
– Hardware Basics
• Access Panels or ISC’s – Local I/O Function Lists
• Alarm Panels
• Reader Interface Modules
DAY 5 TOPICS
• Peripheral Boards – Global I/O
• BlueDiamond Mobile
– Alarm Monitoring Additional Features
– Holidays and Timezones
– Event Archiving
– Hardware Configuration
– Reporting
DAY 3 TOPICS – Single Sign-on
– Introduction to Alarm Monitoring – OnGuard Modules Introduction
4
Exact timing may vary from plan
Course Materials
USB Flash Drive
– Course presentation slides
– Hardware Crib Notes
Pad and Paper
– Please take notes!
Crib Book
OnGuard License Key (by email)
– For use after class
5
HELP: Will appear here to guide you to the correct manual or software component or page
Courseware
Plug the USB device in
Navigate to the root
Double click on autorun.exe
Select the discipline

Open the Presentation
Sticky Notes function
available in Adobe PDF
Reader
– Save file if you add notes!
6
HELP: Remember to take the device with you at the end of class. Add additional files as you wish
OnGuard-Core
CERTIFICATION PROGRAM
7
Certification Program
Program Objectives
– Proficiency of OnGuard VAR technical staff
– Proficiency of OnGuard USER technical staff
– Provide access to:
• UTC Fire and Security Lenel Technical Support Group
• Secure Web Resources
– Keep up-to-date with the latest feature changes and
additions through web-based Distance Learning
– Enhance the owner’s OnGuard system via various
features and topics covered in the courses offered
8
Courses are offered at various dates
and locations which can be found at
www.lenel.com/training
Certification levels are:
– Associate
– Professional
– Expert
9
Course Name
– Core
Duration
– 5 days
Exam Pass
– Required
Certification
– Associate
10
Attendees and Technical Support
Employees (direct or indirect) of Value Added
Resellers, once certified:
– Gain Access to Technical Support for Hardware and
Software help
• Customer site must have a Software Upgrade and Support
Plan (SUSP)
OnGuard End Users:
– Technical Support is available from their Value
Added Reseller
– If a Direct Support Agreement is held then they also
gain Access to UTCF&S Technical Support for
Software
11
Knowledge Updates
Certified VAR and USER Engineers must
maintain Certification through Distance Learning
classes
– Web-based instruction for OnGuard updates and
hardware changes
Each OnGuard release has a corresponding
update for each class (where appropriate)
http://partner.lenel.com will list your required
classes following the version release
System Users can choose to stay current as they
upgrade their OnGuard version
12
VAR Technical Support
The caller must have taken the necessary
course(s) for the issue(s) they are calling UTCF&S
Technical Support Group (TSG) about
TSG phone automation process requires
Certification ID number and System ID number
– Certification ID number is issued automatically to every student
and is sent via email when registered for the CORE course
– System ID is the dongle or software license ID of the customer’s
system
• System ID is the same terminology as License ID, FlexNet ID,
Dongle ID, and License File Activation ID
13
USER Technical Support
The caller must have taken the necessary
course(s) for the issue(s) they are calling UTCF&S
Technical Support Group (TSG) about
TSG phone automation process requires
Certification ID number and System ID number
– Certification ID number is issued automatically to every student
and is sent via email when registered for the CORE course
– System ID is the dongle or software license ID of the customer’s
system
• System ID is the same terminology as License ID, FlexNet ID,
Dongle ID, and License File Activation ID
Support is limited to Software
14
Technical Support Validation Procedure
The following is required:
– Tech Support by email:
• tech.emea@fs.utc.com
– Tech Support by phone:
• See following numbers
– Provide the following:
• Your Certification ID Number
• System ID (Customer license number)
– Must have a valid software upgrade and support contract
(SUSP)
• Provide existing Ticket number if relevant
– Existing tickets bypass initial call queue
– Closed tickets can be reopened if necessary
15
Technical Support Phone Numbers
Free phone EAME Technical Support
Updated telephone numbers may be

obtained via:
https://www.utcfssecurityproducts.eu/lenel-support.php
Subject to change without notice

16
Lenel Knowledge Base
Access from http://kb.lenel.com
– Useful tool for solutions to common technical
issues, product information, and technical
documentation
Includes bookmark and powerful search
New articles are added every week!
17
Certification Exam Access
Access the exam(s) once released and your
certificate(s) using your email address and
password at the exam web site
www.lenel.proexams.com
The exam is taken at this website and once
completed, it will be immediately scored
– Access certificate via Partner Center
Certificates can be authenticated via
www.lenel.com
Certification exam required once every two years
18
Initial Certification Exam
Exam required for certification
– 30 days to complete and pass from end of course
– Hosted at http://lenel.proexams.com
• User name: your email
• Password: sent by email, can be emailed to from site
• Invitation to take exam sent by email on last day
– Multi-Choice, select the one correct answer for each
question
– Minimum 70% to pass
– 2 additional attempts if required
• 80% pass required
– Reminder email sent at 20 days after class
– English or French (with English)
19
Re-Certification Exam
Regular exam required for ongoing certification
– Re-Certification Exam required once every two
years from date of original certification
Notification by email
20
Accessing Lenel’s Web-Based Tools
Initial Password by email
– By attending this class you will be provided with an
initial account and password
– If you need web access help please email
• training.registration@fs.utc.com
– Same user and password for all Lenel Websites
after certification
• http://lenel.proexams.com – examinations
http://partner.lenel.com – VAR transactions logs and
certification certificates
• http://kb.lenel.com – technical support Knowledgebase
21
WARNING!
This presentation and training is based on
OnGuard version 7.4
Earlier versions of OnGuard will have a smaller
feature set
– Consult release notes to find out when features are
introduced to the product
Later versions of OnGuard may:
– Have additional features not covered
– Use alternative navigation to that covered
– Have features removed or changed
– Attend update training!
22
OnGuard-Core
ONGUARD INTRODUCTION
23
OnGuard Architecture Overview 1/2
Diagram
Database OnGuard Server(s) OnGuard Hardware
OnGuard Services
OnGuard Services
Thick Clients Thin (Webpage) clients
24
OnGuard Architecture Overview 2/2
OnGuard Server with Services
OnGuard’s Database provider (SQL/Oracle)
OnGuard Thick clients
– Traditional client software for the configuration and
day-to-day operation of the OnGuard System
OnGuard Thin (browser-based) clients
– A series of Modules that can be added to OnGuard
that provide Browser-based thin clients
– Suitable for PC, Mac, tablet and smartphones
OnGuard Access Control and Video Hardware
Third-Party Hardware and Software
25
OnGuard Versions Review
OnGuard is routinely re-released
– New features added
– Knowledge Base Article 1345
Release Release Date Support End Date
Supported
7.1 September 2015 September 2018

7.2 February 2016 February 2019
7.3 November 2016 November 2019
7.4 January 2018 January 2021*
– Guaranteed support is no longer available for older

versions of OnGuard * To be confirmed nearer the time
26
OnGuard Commercial Packages
SWS / SWC packages
– Only require one (1) SWS (Software Server)
– SWC are for the clients (Software Client)
– SWS-32ES, SWC-32ES, SWS-ADV etc.
PCS / PCC packages
– Includes the computer (PCS-32ES, PCC-32ES, PCS-PRO, etc.)
32ESI, ADVI, PROI
– Access Control and ID Management
IDES, IDADV, IDPRO
– ID Management only
Package Concurrent Clients Quantity of Readers
32ES 1–5 32 – 64
ADV 1 – 10 64 – 256
PRO 1 – Unlimited 128 – Unlimited
27
General Hardware Architecture
LS Communication
Server Alarm Panels
Auxiliary
Inputs and
Outputs
Workstation(s)
Intelligent
System
Controller
Readers
Reader Interface Modules
Locks
Door Contacts
Exit Buttons
Intelligent Dual Reader
Controller
28
Primary Access Control Hardware
Access Panel – ISC – Intelligent System Controller
– LNL-3300
– Legacy only: LNL-500, LNL-1000, LNL-2000
Access Panel – IDRC – Intelligent Dual Reader Controller
– LNL-2220, LNL-4420
Access Panel – ISDC – Intelligent Single Door Controller
– LNL-2210
Alarm Panels – Input and Output Modules
– LNL-1100, LNL-1200, LNL-1300e
– LNL-1100-S3, LNL-1200-S3
RIMs – Reader Interface Modules
– LNL-1300, LNL-1320, LNL-1300e
– LNL-1300-S3, LNL-1320-S3
29
Migration Access Control Hardware
In addition to the previously discussed Primary
Access Control Hardware the following hardware is
also available:
– Picture Perfect® hardware
– Facility Commander® Wnx hardware
– Secure Perfect® hardware
– Diamond II® and Sapphire® hardware
– C•CURE® iSTAR® Pro hardware
The above are designed with the same wiring and
fit the same enclosures as their original
counterparts
Please review the appropriate hardware user guide
for their details UTC Fire and iSTAR®, C•CURE®, are trademarks of Sensormatic Electronics, LLC
Security is not affiliated in anyway with Sensormatic Electronics, LLC
Picture Perfect®, Facility Commander®, Secure Perfect®, Diamond II® and Sapphire® are trademarks of UTC Fire and Security
30
Overview Terminology
Upstream Communication
– Bidirectional between ISC and upstream LS Communication Server
Downstream Communication
– Bidirectional between ISC and downstream hardware
Relay Output
– Hardware that can be turned on, off, or pulsed such as lights, sounder or siren etc.
Devices or Modules
– Addressable hardware components
Input
– Alarm points such as motion detector, glass break sensor, switches, door contacts etc.
Auxiliary Input/Output
– Configurable use
Dedicated Input/Output
– Specific use only
Firmware
– Programmed procedures used to control hardware
31
OnGuard-Core
ONGUARD DATABASES
32
Database Overview
Databases supported by OnGuard are simply a
collection of information interlinked and
organized for ease of data storage and retrieval
– Hardware, Cardholders, and more
OnGuard supports
– Microsoft SQL (Structured Query Language)
• Data stored in Tables (rows and columns)
• SQL 2016, SQL 2014R1 SP1/2, SQL 2014R2, SQL 2014
Express, SQL 2012R1 SP1/2/3, SQL 2012 Express
– Oracle
• Required to have a database administrator (dba) available
to support Oracle needs
• Oracle 12c R1 Server and Oracle 11g R2 Server
33
Databases - SQL
Microsoft has two key versions of SQL
– SQL Server Standard (or Enterprise) – Licensing
required
• Per seat – each computer that will access the database needs a
license. Five clients are included in the standard license and more
can be purchased
• Using multiple OnGuard applications from one computer is only 1
seat
• Each PC running any number of OnGuard Services requires a
SQL CAL license
• Each Thick client PC requires a SQL CAL license
– SQL Server Express
• Free version of SQL
– Installation program included with OnGuard Supplemental
files
34
Databases - SQL
SQL Express limitations
– Express has size limitation
• SQL 2012/14 Express is 10GB
– Versions prior to 2008 were 4GB
– SQL 2012 Express Distributed by Lenel for OnGuard 7.4
– Express has no automatic database back up utility
• No SQL Server Agent Service
• Manual backup via Express Management Studio
– Not distributed by Lenel (obtain from Microsoft)
– Right click on database > Tasks – Backup
– Maximum RAM utilization is 1GB
• Increased workload may impact Express performance
35
Databases - SQL
Required Operating Systems for SQL versions
SQL SQL SP Windows Windows Server
7 SP1 8 8.1 10 2008R2 2012 2012R2 2016
SQL Server 2012 Express (64 bit) 2 X X X X X X
SQL Server 2012 R1 (64 bit) 1 X X X X
SQL 2014 Express (64 bit) 2 X X X X X X
SQL Server 2014 R2 2 X X X X X X
SQL Server 2014 R1 (64 bit) 1 X X X X X X
SQL Server 2014 R1 (64 bit) 2 X X X X X X X
SQL Server 2016 (64 bit) - X X X X X X X=supported
Only SQL versions that are supported for use

with OnGuard 7.4 are listed above
The above is for guidance
– Refer to microsoft.com for latest information and
any known installation issues
36
Databases - SQL
SQL Server Management Studio allows users to:
– Manage SQL
• Create databases and user accounts
• Required to create an Archive Database
– If not available Archive to file is available
– Perform queries
– Configure maintenance related items
• Database backups
• Performance Analysis
• Not available in SQL Express Management Studio version
– Available from http://microsoft.com (free)
37
Database Support – SQL and Oracle
Microsoft SQL Server
– 2012 SP2 or SP3 64-bit
• SQL 2012 Express 64 bit versions supplied ready-to-install
from OnGuard Supplemental files release 18 or later
• Obtain 32 bit version if required from http://microsoft.com
– 2014 SP1 or SP2 64-bit
– 2016
Oracle
– Oracle 12c R1* or 11g R2** Server 64-bit with 32-bit
Client installed if OnGuard is running on the same
server as the database
* 12.1.0.1 and 12.1.0.2
** 11.2.0.3 and 11.2.0.4
38
Operating Systems Supported
Windows Server (64 bit)
– Windows Server 2016
– Legacy Windows Server 2012 R2 Standard
– Legacy Windows Server 2012 Standard
Windows (64 bit)
– Windows 10 Professional, Enterprise, and Embedded IoT
• Not suitable for OnGuard Application Server with IIS
– Legacy Windows 8/Windows 8.1 Enterprise and Professional
– Legacy Windows 7 with Service Pack 1 Professional
Visit http://partner.lenel.com for list of approved

Microsoft Service Packs and Critical Patches
39
Supported System Components
Components
– MDAC - Microsoft Data Access Components
• Consult Release Notes for exact versions
– DirectX - Microsoft DirectX to support multimedia applications
• Consult Release Notes for exact versions
– IIS - Internet Information Services
• IIS 7.5, 8.0 or 8.5
• Required for any Web Based OnGuard products
– Area Access Manager, Video Viewer, Visitor Management
– Scan Shell SDK 10.03.19 or later
• If using Scan Shell OSC device
– Adobe Flash Player 9 or later
40
Supported System Components
Components
– .NET Framework 4.6.1 automatically installed with OnGuard
• Can be manually installed in English via link on Supplemental disk
– For non-English download from Microsoft.com
– MSXML 6 automatically installed with OnGuard
• Can be manually installed via link on Supplemental disk
– Web Browsers
• Internet Explorer 11.0 64 bit
– 32-bit version of Internet Explorer when using VideoViewer (Browser-based Client)
• Microsoft Edge: Evergreen browser

• Apple Safari (Mac only): v8.x or later
• Google Chrome: Version 40.0 or later
• Mozilla Firefox: Version 37.0.1 or later
– Microsoft Silverlight 3.0 or later
• Required for one Visitor Management Administration Webpage
41
OnGuard-Core
SOFTWARE INSTALLATION
42
Installation Steps
Check for minimum system requirements
– Ensure Windows Administrator rights for Windows User
login account for the computer
Install any required prerequisites
– Adobe Acrobat for .PDF documentation
For Windows 10: Enable .NET Framework 3.5
(includes .NET 2.0 and 3.0) from Windows Features
Install SQL (no database/login configuration required)
– SQL Express may be installed via the installation file
within the Supplemental files and folders
Install OnGuard and follow Setup Assistant
Install any hot fixes and Microsoft security patches
– Check for Lenel approval first
43
New Server Installation Supplies
Visit http://partner.lenel.com to download
– OnGuard Software
• ISO package of installation files and folders
• ISO Supplemental of files and folders
– Media kit is optional extra
• USB memory stick and installation user guide
– Updated User Guides (if relevant)
OnGuard License File
– FlexNet files
– Dongle plus files (Legacy)
If using SQL Express
– It is recommended that you obtain a copy of Microsoft SQL
Express Management Studio from microsoft.com
44
Minimum System Requirements
Minimum PC Specifications for non-digital video client or
server:
– Pentium IV Dual Core Processor
– 2 GB RAM
– USB Ports
– Monitor at 1024x768 or higher
– 6 GB of available space
Digital Video Client spec is higher
OnGuard is also supported running on:
– VMware
– Microsoft Hyper-V
– VMware vCenter Server vSphere Client
– NEC ExpressCluster X
– Windows Server Failover Cluster
– Citrix XenApp hosted on Windows 2012 R2 server
45
OnGuard Installation ISO
Decompress or mount the installation ISO file and
double-click on setup then:
– Install OnGuard
– View OnGuard documentation from DVD
• Browse to <DVD-Drive Letter>\Program Files (x86) \OnGuard\Doc
• Adobe Acrobat is available for install on the Supplemental DVD
– Access to the Installation.PDF and Advanced Installation
Topics.PDF as needed
– All documents may be searched at once
• Use the Search All User Guides link in the documentation folder
– Available on Windows 7 Operating System only
46
OnGuard Supplemental ISO
OnGuard Supplemental files
Revision 23 are released with
use with OnGuard 7.4
– The ISO includes :
• Prerequisite Software
– SQL 2012 Express Server
» For 64 bit OS
– Adobe Reader
– .NET Framework 4.6.1
• Credential Center Device Drivers
• License Key Drivers
– SafeNet (USB) Driver
47
Optional Additional Downloads
Visit Microsoft.com to download:
– SQL Management Studio
– SQL 2014 Express 64 bit
– SQL 2016 Express 64 bit
Visit http://partner.lenel.com
– Module installation packages
• Monitor
• Access Manager
• Credentials
• Cardholder Self Service
• Policies
• Visitor Self Service
• WATCH
– More information at the end of this course
48
Installing OnGuard – Server vs. Client
Installed Components Server Client
Installed Components Server Client Service and Support
OnGuard 2012 Program Menu Bulk User Tool √ √
Alarm Monitoring √ √ Communication Server √
Area Access Manager (SWG-RAMxx) √ √ Configuration Editor √ √
ID CredentialCenter (Edit Only) √ √ Database Backup (SQL Express only) √
ID CredentialCenter (View Only) √ √ Database Setup √
ID CredentialCenter √ √ Global Output Server √
System Administration √ √ Import √
License Server √
System Management Console √ √
Linkage Server √ √
Video Viewer √ √
Login Driver √
Visitor Management (SWG-VM) √ √
PTZ Tour Server √ √
Setup Assistant √ √
Documentation √ √ Universal Time Conversion Utility √
Video Archive Server √
Comparison of components installed for a System Tools

Badge Designer √ √
Typical Server System (Column 1) versus Device Discovery Console
Typical Client System (Column 2) Forms Designer (SWG-1210) √ √
License Administration √ √
Map Designer √ √
Replication Administration √
Server usually has all Client components Replicator √
Security Utility √ √
49
OnGuard Server - Installation Path
OnGuard
Server Install Microsoft SQL
Installation
Select Custom
Use ‘Platform’ only if IIS is
installed and configured
NO Does an YES
Select SQL Server/Express AccessControl Select SQL Server
(Assisted) database exist Manual
or will exist?
Select Database and

License Location
OnGuard
Setup
Assistant
50
New Installation of OnGuard
Goals:
– Install SQL Express
– Install OnGuard Server
• Use decompressed or mounted ISO installation package
• Allow Wizard to configure SQL
– Install SQL Management Studio
– Use SQL Management Studio Express
• Review AccessControl Database set-up
• Review LENEL login account
– An account other than LENEL may also be used
– Reference Installation Guide
51
SQL Express – Installation
Locate installation file:
– Mount the Supplemental ISO
file using 7-Zip
• Then run runme.exe
• Click Microsoft SQL Server 2012
Express
• Click Browse the Microsoft SQL Server
2012 Express Source Directory
• Right click on SQLEXPR_x64_ENU and
select Run as Administrator
Extracting the file will begin

Installation is wizard driven
Internet access is required
for SQL updates (not The ‘Install’ link is not likely to
required for OnGuard use) work with Windows 8 or later
52
Select New SQL Server…
(SQL 2012 shown)
53
Accept the license, select Next
(SQL 2012 shown)
54
Product updates are not required, select Next
(SQL 2012 shown)
55
Select as shown, select Next
(SQL 2012 shown)
56
Select Named Instance MSSQLSERVER, select Next
(SQL 2012 shown)
57
Select Next
(SQL 2012 shown)
58
Select Mixed Mode, provide password, select Add
Password must
not include ‘SA’
>7 characters
contain 3
characters from:
(SQL 2012 shown)
A-Z, a-z, 0-9,

specials (!, $, #,
% or similar)
This is the
master
password for
SQL, it is not
used by
OnGuard
59
Provide Administrators SQL Access
Navigate to
correct location
Type
‘Administrators’
group
(SQL 2012 shown)
Check names
Press OK
Press Next
60
Select Next
(SQL 2012 shown)
61
Allow installation to complete, select Close
(SQL 2012 shown)
62
SQL Firewall Port Exception
Required action when the SQL Server is
accessed by a remote OnGuard Server or
OnGuard Clients
Add the following exception:
– Allow Port 1433 TCP Incoming traffic using
Windows Advanced Firewall rules
• (1433 is the default port)
Type ‘Firewall’ then select ‘Advanced Settings’
link
– Inbound Rules
• New Rule
– Complete Wizard for above exception
63
OnGuard Server Installation
Click the installation link on
memory stick or desktop
– Access the ISO files (decompress or mount)
– Then run setup.exe as administrator: setup.exe
Accept the license terms
Some required installations will need a reboot

64
Server (Choose this)
– Installs all standard server
components
– See chart on a previous slide
Client
– Installs all standard client
components
– See chart on a previous slide
Monitoring client
– Installs Alarm Monitoring
application
Badging/Credential Client
– Installs the Credential Center
application
65
Installation type
– Platform
– Custom (choose this)
Database type
– SQL Server/Express (Assisted)*
(Choose this)
• The installation will automatically adds the
database called ‘AccessControl’
• The installation will also make a SQL Login for
OnGuard to use
– If a SQL database already installed and
configured choose SQL Server
(Manual)
– SQL Server/Express(Demo)
• Same as * but with demo kit data
– Oracle Server (Manual)
• If an Oracle database is already installed and
configured
66
Program installation location
– Location where OnGuard will be
installed
Location of License Server
– Network name of License Server
workstation
• Defaults to local machine name
• Port 8189 is default
Location of the Database Note: Hostnames are required not fully
qualified domain names
– Network name of database
Server
• Defaults to local machine name
Database Login
– Database login does not need to
be ‘LENEL’
• Wizard offers opportunity to provide a
different login
67
Custom Install of Device
Discovery Console and
Service
Device Discovery Console
is utilized to discover and
maintenance devices
(Access Panels, Cameras)
in a network
Choose ‘This feature will
be installed on local hard
drive’ from the drop down
Select Next then Install
Wait for Installation Wizard
Completed step, click
Finished
68
Once the OnGuard installation is complete, Setup
Assistant will automatically launch to complete
the OnGuard installation
– On the Server it will assist with:
• Running the Security Utility
• License file installation
• Database installation (connect to existing SQL)
– Running Database Setup
– Starting Services
On a Client computer, it will assist with:
– Running the Security Utility
– Starting Services (Client Update Service)
69
Installation – Setup Assistant
Choose Apply
Settings for the
Security Utility
This Utility makes
the necessary
security
adjustments to the
Firewall to allow
OnGuard operate
Allow Licensing
Server to be a
Trusted Site if
prompted
70
Installation – Licensing
Complete the
License file
Installation/Review
and Activation
Browser based
License
Administration may
also be launched
outside of the Setup
Assistant Recommendation:
– User: admin Change the default Licensing Password
– Password: admin using License Administration after the
product is operational
71
License Types:
– Permanent (required at initial set-up)
• Contains perpetual licensed features
• All OnGuard system require one of these licenses
• OnGuard version specific
• Date restriction applies to Training and Demo licenses
• Install before any Subscription licenses
– Subscription (added after initial set-up)
• Controls access to OnGuard Modules (Thin clients)
• Only available while the Software Upgrade Support Plan is
active
• Install after Permanent license
• Associated to the Permanent license ID number
72
Licensing OnGuard
– Browse to the License file location
• The actual License file (.lic) does not have to remain on the
server once this process is completed
– View License File and scroll to the bottom to click
Next
– Select Yes to Agree to the License Agreement and
click Finish
– Enable the FlexNet License, see following
73
System License implementation
– Use Setup Assistant to complete 3 steps for License file
installation (Browse, View, Agree to License Terms)
• If needed, run License Administration from OnGuard Program
Folder
– LS License Server runs automatically as a service
on the OnGuard Server
• Controls the number of concurrent clients logged in
• Controls access to software options of the system
– If using USB dongles, make sure they are plugged in
– License Administrator password can be changed here
74
Permanent Licensing Activation – FlexNET
Physical dongle option for upgraded systems
– Customers using USB dongles will continue to use
dongles unless they request to use FlexNET
Completed either in Setup Assistant as part of the
License installation or in the browser based
License Administration under OnGuard Program
Folder
– Each license file has a unique Activation ID that determines
features and feature counts
Activation may be completed online, by phone, or
by text messaging (SMS)
75
To activate click on ‘(activate)’
– Not required for Hardware key licensing
76
Choose your Activation
method
– Online
• For online activation the system will
attempt to contact the Lenel
licensing server
– http://licensing.lenel.com
– Phone
• Texting
or
• Calling Technical Support
77
The Online Activation
connection might not be
able to be completed if
there is a proxy server on
the network
– The name of the server and valid
network user account information
must be supplied
Upon successful
connection to the licensing
server, the software will be
activated
78
Phone Activation
– You will see an Activation ID and
Activation Code in the window
– Contact Lenel at the phone numbers
provided to receive the Confirmation
Code
– Type in Confirmation Code
Optionally, select Phone
Activation for MobileActivate
feature
– Use Cell Phone to text Activation ID
and Activation Code
79
Benefits of using MobileActivate:
– No need to contact Lenel Technical Support
– Licenses are activated instantly
– MobileActivate provides 24/7 license activation
Steps
– Text the Activation ID, followed by a space, followed by the
Activation Code to +44 7937 947945
• Entered with or without dashes, and use upper or lower case
letters
• Example: 200110 896T91TK0CZ69l0NCXX5QJ2Z
– Receive Confirmation Code back in approximately 30 seconds
• Enter the received code into the Confirmation Code field
• Must be UPPER case
80
Returning the License
– The activation process ties the license to the server hardware, if
you need to move the license you MUST first return it
– The same process as activation will be used to ‘return’ the
license so that it can be attached to another server
– Contact Technical Support if License Server is unavailable
81
Setup Assistant - Service Log On
LS Site Publication, LS Client Update and LS
Event Context Provider services
Provide account credentials with access to the
database
For these 3 services to be
utilized an account must be
provided with database
access unless Local System
Account can access the
database
In general the use of System

Account authorization is not
recommended instead add
an Administrator user for this
purpose See next two slides for further information
82
LS Site Publication, LS Client Update and LS
Event Context Provider services
– Log On can also be edited under Service properties
LS Site Publication
– Used with OnGuard Enterprise or Mobile Badging
options
LS Client Update
– Used to update OnGuard client Workstations
automatically
LS Event Context Provider
– Used to translate event IDs produced by hardware
into meaningful information for Webpages
83
Manual creation of a Services Log On Account
Computer Management
– Action ‘Add Users’
– Password required
84
Manual creation of a Services Log On Account
– Make user a member of ‘Administrators’ group
85
Setup Assistant - Backup
A backup should be taken within Setup Assistant
if updating from an earlier release of OnGuard
86
Database Installation
– If prompted provide any
credentials and press
‘Connect’
– Press ‘Install database’
87
Database Setup
– Populates the OnGuard AccessControl database with the
necessary tables
– Runs on OnGuard Server only
– A valid OnGuard license is required in order to run Database
Setup
– Form Translator will be executed automatically
• Used for Web Based Applications
88
Service Startup
– Necessary LS Services will
start automatically
• Does not include LS Comm
Server which is required if
communicating with
hardware
Setup Assistant
Finished
OnGuard Server
installation is complete
89
Installation – Setup Re-run
Some Set-up Assistant
Components can be re-run if
required
All Apps > OnGuard 7.4 >
– License Administration
• (Default admin admin to login)
– Security Utility
• To reset Firewall exceptions
– Database Setup
• To repair or upgrade database
– Set-up Assistant
..continues.
90
Licensing Administrator Properties
– Launch OnGuard License Administrator Application
– Used to change the license admin password
– Allow local administration only checkbox
• Must use License Administration at that specific computer only
91
OnGuard Installation Complete
OnGuard applications are ready to use
By default the only user enabled is the SA
account
Password is SA and must be changed on initial
login
– Log in to System Administration and change the
default SA password from SA to a secure password
92
OnGuard Passwords
OnGuard supports strong password enforcement
for both user logon and database access
– Passwords that are considered weak cannot be used
– Database password needs to be changed via the Login Driver
Application while the LS Login Service is not running
• Default password = Secur1ty#
– Prior to OnGuard 7.0 the default password was MULTIMEDIA
• Reference Installation Guide
– Reinstall Modules if Database password is changed
OnGuard is not case sensitive
Strong Password Rules
– Passwords cannot be blank, same as the user name,
MULTIMEDIA, LENEL, BASIS, PASSWORD, PROKUPETS,
PROKUPET or Secur1ty#
93
OnGuard-Core
ONGUARD SERVICES
94
OnGuard Services
Several OnGuard programs may be run
interactively on the desktop or as a Windows
service (Preferred)
– Lenel programs able to be run as a service will be listed as LS
{service name}
Windows manages all services running in
Windows and allows the administrator to set the
startup of the service
Location options to view LS Services
– Start (Run) – type in services.msc
– Control Panel > Administrative Tools > Services
– OnGuard’s System Management Console
95
OnGuard Services
Start with
‘Lps …’ or
‘LS …’
OnGuard’s
System
Management
Console
view
Windows Services view
96
OnGuard Primary Services
LS Login Driver (Auto start)
– Manages database login access
– Typically located on the OnGuard Server or Database Server
• Does not run on client machines
LS License Server (Auto start)
– Communicates with the software key and provides licensing
verification (concurrent logins and feature sets available)
– Typically located on OnGuard Server, but can be any
workstation
97
LS Communication Server (Start if needed)
– Provides a communication interface between the access
control hardware and the OnGuard Server
– Typically located on OnGuard Server, but can be any
workstation(s)
– Can have LS Comm Server running on multiple computers
LS Linkage Server (Start if needed)
– Manages multiple features within OnGuard
• Scheduler
• Global I/Os and more
• Must be authorized before it can be started
– Typically located on the OnGuard Server, but can be any
workstation
98
LS Client Update Service (Auto Start)
– Allows for automatic update of client machines to
match the version of OnGuard running on the
OnGuard Server
• LS Client Update Service works for new releases and
cumulative hotfixes
– Installed and runs automatically on all OnGuard
client machines
– The client User does not need Windows
administrator rights
• Service installs the upgraded client which requires
administrator Windows Log on credentials
99
LS Client Update Server Service (Start if needed)
– Configuration is needed in System Administration >
System Options
– Service must be able to interact with the Desktop
– Adjust service ‘log on as’ in client Workstation

services if using System Account authorization
100
OnGuard-Core
SQL SERVER MANAGEMENT
STUDIO INSTALLATION AND USE
101
SQL Management Studio
Installed as standard with SQL (licensed edition)
– Optional with SQL Express 2012, 2014 or 2016
Search www.microsoft.com for SQL 2012, 2014
or 2016 Express Management Studio Download
– Select 64 bit instance, Download then Run
Select all defaults at each step and accept the
license when prompted
Required for database property checks and for
manual preparation of database(s) if desired
See video for SQL Management Studio
installation
102
Select Installation
This process is only
required if the
database and SQL
login is to be
manually
(SQL 2012 shown)
configured
103
Setup Support files
(SQL 2012 shown)
104
Select Perform a new installation of SQL Server
shared component
(SQL 2012 shown)
105
Product Key and License Terms
(SQL 2012 shown)
106
Select Management Tools
(SQL 2012 shown)
107
Click Next for Error and Usage Reporting and
Installation Rules
(SQL 2012 shown)
108
Installation Progress and Complete
(SQL 2012 shown)
109
Log in to SQL Server
Management Studio
– Provide Login Credentials:
• SA + password or
• Windows Administrator user
credentials
(SQL 2012 shown)
Review
– AccessControl database
exists
– Lenel* login exists
*or as specified during OnGuard
installation
SQL 2012 Management Studio is illustrated
110
Manually Configuring SQL Server
Here are the steps to manually create the
necessary SQL database components required
by OnGuard
Launch SQL Management Studio
– Login using either Windows Authentication or SQL
Authentication
• If you use Windows Authentication, you must be an Administrator on the
SQL server
– Carefully and accurately follow the procedure

described in the OnGuard Installation User guide
111
Expand SQL server Object
tree
– To create a new ACCESSCONTROL
database, right click on the
Databases folder and select New
Database
OR
– To view current ACCESSCONTROL
database right click on the Databases
folder and select Properties
– Installation Guide
• Microsoft SQL Server 2012 or 2014
112
The OnGuard database name needs to be
– ‘AccessControl’
The database has two major components:
– Database file (*.mdf)
• Repository of configuration and data
– Transaction Log file (*.ldf)
• Log file of database transactions processed by SQL
113
50MB is the recommended initial size of the
database file
– The default behavior is to automatically grow the database file
– The file size will increase by 1% when required
– Unrestricted file growth
• The initial size is less important if this feature is used
– The recommendation is to set the growth to 10%
10MB is the recommended initial size of the
Transaction Log file
– The default behavior is to automatically grow the log file
– The file size will increase by 1% when required
– The maximum recommended log file size is 2048 MB
114
Database Recovery Model
– Simple - May only be restored to the point of the last backup
– Full - Provides complete protection against media failure
– Bulk-logged - Takes less space, but does not offer as many recovery
options
Compatibility Level
– Set to SQL Server 2012 (110)
• This is used for running SQL scripts
115
Database Options – set to True
– Auto shrink
• When the database shrinks in size, the
correct size will be shown
– Auto update statistics
• Specifies that out-of-date statistics
needed by a query for optimization are
built automatically during database
optimization
– Recursive triggers
• Enables recursive firing of triggers
116
The default database login for
OnGuard needs to be created
– It is automatically created if SQL Express
was installed during OnGuard Installation
Open the Security folder, then
right click on the Logins folder
and select new login
– To View existing LENEL account – right
click on Lenel account located in the
Security>Logins folder and go to Properties
117
The login that OnGuard will use should be
configured as follows (initially):
– Password ‘Secur1ty#’ – case sensitive
– Choose the use SQL authentication option
SQL passwords are case-sensitive
It is recommended to deselect the password
checkboxes
– Enforce password policy
– Enforce password expiration
– User must change password on first login
118
The Lenel account should have the
following server roles
– Database Creator (dbcreator)
– Server Administrator (serveradmin)
The Lenel account should also be
mapped to these databases
– master
– tempdb
– DO NOT select the AccessControl
database at this time
• The Lenel account cannot become the owner
of the database if AccessControl is chosen at
this step
119
The Lenel account needs to be the owner of the
AccessControl database
– Run this stored procedure from the SQL New Query
sp_changedbowner lenel
– This will make the Lenel login account the owner of the database
– Press the F5 key or the Execute button to run the procedure
120
3. Click Execute or press F5
1. Select
new
2. Type
query
the query
as shown
4. Success
message
121
Limit SQL to 50% of memory use when OnGuard is
on the same server
– See installation guide for additional details
The SQL service must be restarted after this change
Set Memory Usage
– In the Object Explorer pane of SQL Server Management
Studio, right-click on the database engine
<ServerName> and select Properties
– Select the Memory option on the Select a page pane
– Set the Maximum server memory (in MB) option to be
roughly one half of your system’s actual memory
• This will make sure that the database does not use your entire
system’s memory, which would needlessly slow down your
system
122
OnGuard-Core
DATABASE BACKUPS
123
SQL Database Backup
It is critical to perform backups of the database
Installation Guide
– Database Backup and Restoration
Manual Database backup
– SQL 2012 Express Management Studio
• Right click on AccessControl database > Tasks – Backup
• Optionally under OnGuard program folder > Service and Support >
Database Backup
– SQL Server Management Studio
• Right click on AccessControl database > Tasks - Backup
• Backup type
– Complete (Full Backup)
– Differential (Backup changes since the last full backup)
• Select destination media
124
SQL Database Backup
Automatic Database backup
– Standard SQL backups can be automated by using a SQL
Maintenance Plan
– SQL Express backups need to use the Windows scheduled
task tool in Accessories > System Tools > Scheduled Task (or
Task Scheduler)
• Refer to Lenel Knowledgebase Article 1131
• http://kb.lenel.com
125
SQL Database Restoration
Database Restoration
– All OnGuard database connections must be terminated prior to
attempting to restore
– It is recommended to delete the current AccessControl
database prior to the restore if it exists
– SQL Server Management Studio
• Right click on the database folder
– Restore Database
126
SQL Database Services
There are several SQL Server services, but only two are
utilized as part of an OnGuard system
– SQL Server (MSSQLServer) Service
• This service must be running for database interaction
– SQL Server Agent Service (MSSQLServer)
• Installed with Standard SQL Server only, not available with SQL
Express edition
• Must be running for SQL Server Maintenance Plans (backups)
127
OnGuard-Core
DATABASE TRANSLATION
UTILITY
128
Database Translation Utility
OnGuard’s primary
interfaces are available in
many languages
– OnGuard will
automatically install all
released language packs
for new installations and
upgrades
Use the Translation Utility
to select required
language
129
Database Translation Utility
Database Translation Utility,
which updates the database
with the translation language,
must be run on the server in
which the database resides
Windows regional settings
need to be changed to the
language to be used
Must be enabled on the License
file (no charge)
‘Language Pack User’ Guide
documentation in OnGuard
installation folder
130
OnGuard-Core
THICK CLIENTS, UPGRADES

AND MAINTENANCE
131
Thick Client Installation
For new installations
– Use Installation files to carry out a ‘client’ installation
• When prompted follow wizard for Client install
For existing installations being upgraded
– If Automatic (Thick) Client Upgrade was previously
fully configured
• (Thick) Client(s) will automatically upgrade
– If Automatic (Thick) Client Upgrade is not configured
• Carry out manual upgrade from installation files
• Follow wizard for (Thick) Client System install
132
Thick Client Installation
LS Client Update Service
– Allows the OnGuard server workstation to
automatically update Think Clients
– When a user at a client workstation opens an
OnGuard application, the application detects that the
software version does not match the Server
• The application then allows the user to either cancel the
login or update their (thick) client software
133
HELP: Must be configured for use within System Administration -> Administration -> System Options -> Client Update
LS Client Update Service
Two services enable automatic update of Clients
• Note: Servers must be updated manually
– LS Client Update Server Service is installed on the
server workstation
– LS Client Update Service is installed on each client
workstation
– Update occurs when user logs into client
– Must be configured for use prior to server upgrade
134
HELP: Must be configured for use within OnGuard. OnGuard 6.5 or later required.
Installation Maintenance Mode
The OnGuard installation
will detect an instance of a
previous installation with the
same version/build
– Modify installation
• Add/remove components
– Repair
• Reinstalls any files found
to be corrupt
– Remove
• Removes files created
by the installation
• See Knowledge Base Article
number 1108
135
OnGuard Webpages (not Modules)
OnGuard Web-VideoViewer and OnGuard Web-
Visitor Management pages require the following
services:
– Internet Information services (IIS) version 7.5, 8.0 or 8.5
• Installed from the add/remove windows components dialog in the
Windows control panel (Windows Server is required)
– Lenel LS Application Server Service
• Can only be installed via from OnGuard server installation using
installation media new install or update
Please attend EMEA Professional-Data* class for
full tuition
*Class content is subject to change without notice
136
Software Upgrade from 7.3 or older
The OnGuard 7.4 installation will detect an
instance of a previous version of OnGuard
– Upgrades from OnGuard 6.x.x
• Database Password cannot be MULTIMEDIA
– Change via Login Driver Application before or after upgrade to 7.4
– Upgrade the Server first, then client machines
• Or allow clients to upgrade themselves
– The update process will prompt the user for a database
password and perform a scan for non-supported hardware
• This hardware must be removed from the existing database before
upgrade can continue
• A database backup will be required before the upgrade can continue
– Install updated License file after upgrade
– Database Setup must be run after upgrade
• Automatic via Setup Assistant
– If upgrading from 6.3 or earlier refer to
knowledgebase article 1674 for further information
137
Software Upgrade (cont.)
Ensure that all prerequisites are met
.Net 4.6.1 and C++ will auto install, if missing
Accept License terms, click next
Verify Lenel DSN when prompted
– Existing Database will be validated as suitable
Re-boot when prompted
Follow Set-up Assistant
138
OnGuard Updates
OnGuard Hotfixes (when/if available)
– Available only from Lenel Technical support
• Specific to build
• Only install if the fault being fixed is useful
• STOP ALL LENEL SERVICES before installing
• Must be installed on all OnGuard Workstations (Servers and
Clients) manually
– All hotfixes will be found in a later service pack or release
Microsoft Windows Security Patches
– Only install if approved by Lenel
– Check http://partner.lenel.com
– Recommended that Microsoft Automatic updates are disabled
• Reboots are often asked for that can disrupt OnGuard activity
139
Changing OnGuard’s SQL Password
Procedure:
– Stop LS Login Driver service
– Run LS Login Driver as an application as an Administrator
– Open LS Login Driver from System Tray
– From the Edit menu select Change Password
– Follow prompts, provide SQL SA Password when prompted
Default SQL Login password is Secur1ty#
– formally MULTIMEDIA
Note: Both the LS Login Driver and Database server password
must be updated
– This will automatically happen if they are both on the same machine
– If they are NOT on the same machine, the password can be passed
to the database server via plain text (uncheck box)
Exit the Login Driver application and restart the LS Login Driver
service
If database password is changed some Modules may need to be
reinstalled
140
OnGuard-Core
INSTALLATION TIPS
141
Operating Systems - UAC
Windows UAC:
– When using these operating systems, it is
recommended that User Account Control (UAC)
be turned off
• Potential issues with installation, registering .dlls,
accessing acs.ini file, changing Login Driver password
– Go to Control Panel/User Accounts
• Change User Account Control Settings slider to never notify
– In Windows 2008 uncheck the box to turn it off
• Search for UAC to find settings location
– Display settings for Windows
• Issue – overlapping of fields in OnGuard System Administration
• In Windows 7 adjust DPI setting to 96 DPI
• Set scale to 100% in Windows 8/8.1/10
142
Virtualization Support
OnGuard 7.4 can run on:
– VMware ESX/ESXi Server versions 5.5 and 6.0 for
all OnGuard services
– VMware Workstation 10.0 or 11.1
• Cannot be an OnGuard licensing server
– Microsoft Hyper-V 2012
Virtual platforms are NOT supported with video
viewing clients
143
Antivirus Support
Antivirus
– The following products are suggested
• Symantec Endpoint Protection 12.1.x
• McAfee Virus Scan
– Lenel does not re-test for new antivirus updates
– Antivirus software installed at the owners risk
– May be necessary to disable Antivirus scanning while
installing products
– If the antivirus software introduces an alternative Firewall
the exceptions for OnGuard must be manually created
within this product
– The ..\LicenseServerConfig\Licenses folder on the
License server should be excluded from scanning
• It will sometimes corrupt the license file
144
OnGuard Clean Removal
Remove OnGuard from computer via
Add/Remove Programs
– Or
Using same version of OnGuard Installation files
– Select Remove
Note that SQL and third-party software installed
for OnGuard will remain
• Knowledge Base Article number 1108 for full instructions
145
Open Database Connectivity (ODBC)
Open Database Connectivity (ODBC) is the process
of connecting software to a database
– SQL Server Native Client 13.1 is used as the ODBC Application or
Service
driver for OnGuard 7.4
ODBC should be manipulated if:
– The database computer name changes MDAC
DSN=‘lenel’
– OnGuard database (AccessControl) location has
changed
– SQL Server connecting to has changed Database
– Troubleshooting OnGuard Installation
Location of 32 bit ODBC
– C:\windows\syswow64\odbcad32.exe
146
ODBC - System DSN
OnGuard uses a System
DSN (versus File or User DSN)
DSN = Data Source Name
The OnGuard installation
process creates a System
DSN automatically
– The default DSN name is
‘Lenel’ Note: OnGuard uses the 32 bit ODBC
The DSN is used by the Data Sources found at:
C:\Windows\SysWOW64\odbcad32
OnGuard software to
connect to the
AccessControl database
147
Configuring ODBC - System DSN
Server Network Name
Database Login ID/Password
– May use either the SA or Lenel account to authenticate
148
Configuring the System DSN
Default Database
– AccessControl
Testing the connection
– Testing the Data Source confirms
• The server name is correct
• The database exists
• The ID/Password combination is
correct
Note: Leave all other configurations at
their default settings
149
ACS.ini Configuration File
ACS.ini file is installed during OnGuard
installation
Initialization file which gives direction and
configuration settings when opening an
OnGuard application
ODBC Connection
– Connect="ODBC;DSN=Lenel”
LicenseServer
– Host Name
– Port (Do not change without consulting Lenel Technical
Support)
In Windows 10, Administrator rights are required
for Notepad to make edits to the ACS.INI file
150
OnGuard Database Setup error
Database Setup errors
– Use Configuration Editor to resolve
• Found under Service and Support folder within the
OnGuard folder
• Alters either the Application.config file or acs.ini file
• No Login required
• Will detect and correct inconsistences within configuration
files
151
Error Opening OnGuard Application
Error when opening an OnGuard application
Check ODBC connection for correct Server

name, Login Authentication
Named Instances:
<<ServerName>>\MSSQLSERVER
<<ServerName>>\SQLExpress
<<ServerName>>\<<chosen instant name>>
152
Error Opening OnGuard Application
Error when opening an OnGuard application
– Ensure Named Pipes is Enabled for all Protocols
• SQL Server Configuration Manager
• Access via All Apps > Microsoft SQL Server 20xx >
Configuration Tools > SQL Server Configuration Manager
– Ensure TCP port 1433 is open in the Firewall
153
System Management Console
Provides a snapshot of the system
– Used for troubleshooting purposes
– Located under OnGuard folder
Displays four types of system info
– Computer information
– OnGuard information
– OnGuard services
– OnGuard log files
Export / Import files
– Log files not included
154
OnGuard Logs
The OnGuard log files provide information as to
OnGuard status and errors that have been
generated
The logs are located in the following hidden
location
– C:\ProgramData\Lnl\logs
Depending on the OnGuard installation, logs will
be generated for general database access
issues, OnGuard clients and Service issues
155
OnGuard-Core
NAVIGATION
156
OnGuard ‘Console’
OnGuard provides the Lenel Console Webpage to
launch Client Applications and OnGuard
Webpages
Type https://<Server_name>:8080
– Use Fully qualified domain name of server
– A Service called LS Module Manager is responsible
for maintaining content
Light tile color

indicates client
not installed on
Workstation
157
OnGuard ‘Console’
Console automatically rearranges for different
shape browsers including Smartphones
Tiles can be rearranged by dragging tiles
OnGuard will add tiles as Modules are added
New tiles can be added to launch other webpages
(not applications) if required:
– Locate (on server) folder:
• C:\ProgramData\Lnl\Console\modules
– Copy an existing sub-folder (they are named the
same as the existing tiles)
– Rename folder with the new tile name
• Must be in lower-case
Continued….
158
OnGuard ‘Console’ - Custom Tiles
– Edit config.json within folder you copied and update url
with absolute url, for example:
“url”: http://lenel.com,
“web” : false, -if application
“web” : true, -if web page
– Edit translation.json file within ..\en\locales folder and
update name and description for tile, for example:
“name”: “Lenel Web Site”,
“description”: Lenel
– Note that UTF-8 encoding should be used
• For support special characters including ® and TM
– Optional advanced changes
• Additional custom changes include:
– Color of tile
Continued….
– Graduated tile colors
159
OnGuard ‘Console’ - Custom Tiles
– Confirm LS Module Manager Service is running
then review and test result via
• https://<server>:8080
• Empty Brower Cache if new tile if not showing
– Language Support is offered
• Create additional an folder in the locales folder
– e.g.
» ar-SA for Arabic
» nl-NL for Dutch
» de-DE for German
– Reference Chapter 11 of System installation User

Guide for full list of language codes and other tile
options
160
OnGuard Navigation
To gain an understanding of:
– Customizing OnGuard’s System Administration layout
– Utilizing OnGuard Help files
161
Lenel OnGuard Applications
OnGuard has multiple
applications within one product
– Specific applications can be installed on a
computer through custom installation of
OnGuard
• Guard station using Alarm Monitoring
• Badging Station using ID Credential Center
162
Menus
Text menus are organized for ease of use
Toolbars allow shortcuts to commonly used
dialogs
– Toolbars may be hidden, rearranged, docked, and undocked
163
HELP: System Administration
Menus - Application
Application menu
– Launches the configuration wizards
– Allows log on and off from the application
– Allows the password to be changed for the current logon
– Allows printer setup
164
HELP: System Administration > Application
Menus - Edit
Edit menu
– Required for Microsoft Certification
– Cut, Copy, Paste is available on certain forms
165
HELP: System Administration > Edit
Menus - View
View menu
– Controls toolbars
• Reset to factory defaults
• Add text labels to toolbars
• Allows toolbars to be hidden from view
– Status bar appears on the bottom of the window
– Tabs used for each open screen which allows fast access to
multiple screens
166
HELP: System Administration > View
Menus - View
Font and text color can be easily reset to system
defaults
– The list font
– The disabled text color
Save settings remembers the settings changes
made when the user exits the program
– The settings are per user, per machine
The system tree is a graphical depiction of the
common system configuration and shortcuts to
the configuration dialogs
– It may be hidden, docked or undocked as well
167
HELP: System Administration > View
Menus - Window
The Window menu controls how the windows
appear. They may be set to:
– Cascade
– Tile horizontally
– Tile Vertically
– Allow the user to arrange the icons
– Close all windows
168
HELP: System Administration > Window
Menus - Help
The Help menu contains:
– Contents
– Search
– Send Feedback
– About
169
HELP: System Administration > Help
Menus - Help
There are several ways to get to the help screen
– F1 key
– Help menu
– Question mark toolbar button
– Help button
170
Menus - Help
On any
context-
sensitive help
screen, there
are
descriptions,
and
procedures to
help you
171
Menus - Help
You can also
search by
keyword
172
Help - About
Help – About
contains:
– Intellectual Property
Information
– Product Version
– File Versions
– System Information
• Includes System ID
Number known as
‘DongleID’
173
HELP: System Administration > Help > About
OnGuard-Core
SYSTEM-WIDE
CONFIGURATION
174
OnGuard System Wide Configurations
To gain an understanding of:
– Creation of User accounts and permission levels
– System wide configurations affecting all OnGuard
users
– Workstations
– Scanners and Encoders
175
System Configuration
Users
– The setup of personnel with permissions to operate and
configure OnGuard via the OnGuard applications
System Options
– Configure the system’s default settings such as quantity of
timezones, access levels, and more
176
User Permissions
Configures user accounts for OnGuard applications
Permission Groups allow easy configuration of
OnGuard user accounts with similar permissions
Report
Permissions
System Cardholder
Permissions Permissions
OnGuard
User
Monitor Field/Page
Permissions Permissions
177
HELP: System Administration > Administration > Users
User Accounts
Create (Add) the user
information
– First and last name
– Notes may be added
Create an internal
account for the user
– User name and password
Access to OnGuard
disabled
Created/Changed dates
178
HELP: System Administration > Administration > Users > Users > General
Permission Groups
Permission Groups are templates used to control
user permissions within OnGuard applications
Appropriate permission group(s) can then be
assigned to the OnGuard User account
179
HELP: System Administration > Administration > Users > Users > Permission Groups
User Permissions (cont.)
System Permission Groups
– Controls system wide configuration abilities, application access,
and hardware configurations
Icon Key:
View
Add
Modify
Delete
Icon Indicator Key:

Dark - Enabled
White - Disabled
Partial under group
180
HELP: System Administration > Administration > Users > System Permission Groups
Cardholder
Permission
Groups
– Cardholder
configuration
– Badge configuration
– Capture options
– Bulk operations
181
HELP: System Administration > Administration > Users > Cardholder Permission Groups
Monitor Permission
Groups
– Alarm Monitoring
options
– Video control
– Hardware control
182
HELP: System Administration > Administration > Users > Monitor Permission Groups > Permissions
Report Permission
Groups
– Allow Users to add
and/or delete reports
– Allow Users to view,
and/or modify specific
reports
– Filter Report View for
ease of locating
specific set of reports
183
HELP: System Administration > Administration > Users > Report Permission Groups
User Permissions - Report
Upgrading to OnGuard 7.4 from 6.6 (without SP1)
or earlier
– OnGuard Users previously with no report capabilities
will have no report capabilities in 7.4
– OnGuard Users previously with partial report
capabilities (add, modify, delete, view/access) will
have View only access in 7.4
• Post-upgrade adjustments may be required
– OnGuard Users previously with full report
capabilities will have full report capabilities in 7.4
184
User Permissions
Field/Page Permission Groups
– Controls the ability to view/edit cardholder related fields
185
HELP: System Administration > Administration > Users > Field/Page Permission Groups
Permission Groups - Comparison
Compare checkbox can be used on System,
Cardholder, Monitor, and Report Permission
group tabs
Used to compare feature set between two groups
186
HELP: System Administration > Administration > Users > System Permission Groups - Compare
Exporting Permission Group Data
System, Cardholder, Monitor, and Report
Permission Groups may be exported to a Comma
Separated Variable (.csv) file format
– In the Compare mode, the user can export the
settings of the permission groups being compared
– CSV files may be imported into programs such as
Microsoft Excel
187
HELP: System Administration > Administration > Users > System Permission Groups
User Search
Search for Users with common permissions
• Permission Group
• Selected Permission (And)
– Must have all selected permissions
• Selected Permission (Or)
– May have any selected permissions
• Results may be exported as .csv file
188
HELP: System Administration > Administration > Users > Search
System Options – General Tab
Authorization Warning
– Displayed during logon as a disclaimer
• ‘None’ is the default
– Standard or Custom are other options
• Define the text and font to be displayed
• “&” symbol can be used to designate a keyboard
shortcut (Alt key plus first letter – Alt Y for example)
• ‘Yes as default’ may be selected which allows the
user to accept the warning by hitting Enter Key
189
HELP: System Administration > Administration > System Options > General System Options
Alarm Monitoring Event
Queue Threshold
– System wide setting for controlling
the maximum number of days of
queued events that the database will
store per Alarm Monitoring station
• Monitor station must be configured to
queue events
• Sets how many days before queue is
overwritten
– Specify monitor zone assignments
• If selected, allows you to choose
which monitor zone a controller is
assigned to
190
The LS Linkage Server is
used to execute many
features within the
OnGuard software
– One instance per system
• Can be run from any OnGuard
workstation, but typically on the
OnGuard Server
– Responsible for:
• Schedules, Action Groups, Global
I/Os, Guard Tours, Digital Video
Locking, Automatic E-mail,
Destination Assurance and more
191
Enforce strong passwords
– Mandates changing weak account passwords
– Default is Enabled
– Enforces the following rules
• Passwords cannot be blank
• Passwords cannot be the same as the user name
• Passwords cannot be one of the following keywords
– MULTIMEDIA
– LENEL
– BASIS
– PASSWORD
– PROKUPETS
– PROKUPET
– Secur1ty#
192
System Options - Hardware Settings Tab
System Wide Limits
– Holidays – 20-255 supported (Default = 255)
– Timezones – 127-255 supported (Default = 255)
– Access levels – 255-31,999 supported (Default = 255)
– Available panel memory for badges is reduced as these
settings are increased
193
HELP: System Administration > Administration > System Options > Hardware Settings
Maximum Badge Number Length
– Default length is 9 digits, configurable up to 18 digits
• Crystal Reports limited to displaying 15 digits in Lenel reports
– All areas of the software dealing with badge ID will conform to
this system setting
– Affects Access Panel available memory
194
Maximum access level assignments per badge
– Total
• With no activation dates
• With activation dates (Start / End date and time)
• Cannot assign to each cardholder more Access Levels than the
quantity selected in the ‘Total’ field
– 0-128 supported
• The default is 6 assignments
• OnGuard 7.4 and later allows for up to 255 per badge if enabled
via Cardholder Extended Options as details here
– Affects access panel available memory
195
System Options – Client Update Tab
Allows the OnGuard Server to automatically
update client workstations
Feature not enabled by default
– Documentation located in Advanced Installation Guide
• Remote Installation of OnGuard
LS Client Update Service must be set to Automatic

start-up and appropriate Log On account, see earlier
196
HELP: System Administration > Administration > System Options > Client Update
Workstations
Defines hardware connected to each Alarm
Monitoring PC
– Encoder
– Scanner
Workstation
Scanner Encoder
197
HELP: System Administration > Administration > Workstations
Encoders/Scanners
OnGuard has the ability to
encode a wide variety of
card types and card
manufacturers
– Smart and Magnetic Cards
CSS Scanner may be used
for Passport, Driving
License and Business
Card Optical Character Note: USB devices will need
the appropriate drivers
recognition and image installed
scanning
198
HELP: System Administration > Administration > Workstations > Encoders/Scanners
Encoders/Scanners
Encoder is connected to Workstation
– The computer must be first configured as a workstation
Select the encoder/scanner type
Select the card formats to be encoded
199
HELP: System Administration > Administration > Workstations > Encoders/Scanners
Encoders/Scanners
The encoder can be configured one of two ways
– As a standalone device
– As an inline device within a card printer
Communication
– The settings will be dependent on the device type
– All port and communication parameters are set here
200
HELP: System Administration > Administration > Workstations > Encoders/Scanners > Location or Communications
Section Summary
System wide configuration
– User accounts and permission groups
– System Options
• Hardware settings
• Client Update Service
Workstations
– Encoders
– Scanners
201
OnGuard-Core
HARDWARE BASICS
202
Power Supply Specifications
Majority of boards require external power
– Two have Power over Ethernet (PoE) option
Current capacity must be adequate to handle
total peak device load
General Rules:
– Power source should be located as close to the
hardware as possible
• Use screened/shielded cables for log-runs
– Minimum 18 AWG or 1.02 mm in diameter
– Do not exceed the voltage rating of individual boards
203
HELP: Use ‘peak’ power requirements when calculating power required.
Enclosures and Power Supplies
Lenel EMEA Enclosures and Power Supplies for
OnGuard ‘LNL’ hardware
LNL-200XA LNL-400XA LNL-600XA

330 x 275 x 80mm 400 x 500 x 80mm 478 x 515 x 146mm
Also available without Power Supplies

204
LNL-2/4/600XA common features
Meets European directives:
– Low Voltage 2014/35/EU
– EMC 2014/30/EU
– WEEE 2012/19/EU
– RoHS2 2011/65/EU
Universal mains input voltage 90-264 VAC
High-efficiency electronics for reduced running
costs and lower operating temperatures
Lid and removal from wall tamper detection
PCB supports and fixings supplied
Cable management
205
Accessory kit included with enclosures
Terminal
Press-in nylon spade
standoffs for adapters for
boards/modules batteries with
screws not
spades
Metal post for
metalized
boards/modules Cables and
mounting hole cable tie for
battery
connection
Screws for
LNL1300e or
LNL2210 Cables ties
for cable
LNL-400XA kit shown management
LNL-600XA kit includes plugs for provided cable holes if they are not required and enclosure keys
LNL-200XA kit does not include battery Terminal to spade adapters or metal posts
206
Earth bonding
– The modules with Ethernet connection must be
earthed via the metal mounting post to the
enclosure
– Install the metal post before mounting on the wall
Use one of these

instead of a nylon
post in this position
Example LNL-2220 207
PSU status and diagnostic LEDs
– Mains present and fault (visible outside
enclosure)
Volt-free contact signalling mains failure [EPS]
– Wire to a Power Fault Input on a LNL module
Volt-free contact signalling output and battery
faults [GEN]
– Wire to a Power Fault Input on a LNL module
Full electronic short circuit and overload
protection on load output under mains
operation
Individual battery and output fuse protection
Three-year warranty
208
LNL-200XA
LNL-200XA, Suitable for
– Either
• LNL-2210 + LNL-1300
• OR
• LNL-1300e
• OR
• 2 x LNL-1300(-S3)
Contains a 13.8VDC 2A
Power Supply
Space for 12V, 7.2 Ah
Battery
Door secured with screws
and tamper switch
209
LNL-200XA Backplane
Internal Layout – module mounts
LNL-1300e or
LNL-2210 or
LNL-1300(-S3)
LNL-1300(-S3)
210
LNL-400XA
LNL-400XA Suitable for
– Suitable for a combinations of
LNL panels
Contains a 13.8VDC 4A
Power Supply
Space for 17Ah Battery
Door secured with screws
and tamper switch
211
LNL-400XA Backplane
Internal Layout – module mounts – Option A
LNL-1100(-S3) OR
LNL-1200(-S3) OR
LNL-1320(-S3) OR
LNL-2220 OR
LNL-4420 OR
LNL-8000 OR
LNL-3300 OR
LNL-1300e
LNL-1300 (-S3)
212
LNL-400XA Backplane
Internal Layout – module mounts – Option B
LNL-2210 OR
LNL-1300e
LNL-1300(-S3)
213
LNL-600XA
LNL-600XA, Suitable for
– Suitable for a combination of
LNL panels
– 8-way power fusing module
Contains a 13.8VDC 8A /
27.6VDC 4A Power Supply
Space for 1 x 17Ah Battery
or 2 x 8Ah
– Use one battery for 13.8V
power or 2 batteries in series 2 x hinged Plates
for 27.6V
Door secured with 2 locks
and tamper switch
214
LNL-600XA Backplane and 2 x Plates
Cable holes are provided that align with the
internal cable management for each plate
– Use square cable containment arriving at enclosure
for termination on modules that are plate mounted
Plates
Cable route to plates
Can be plugged with supplied
plugs if not needed
Module layout examples follow

– Backplane of enclosure appears first and the two
mounting plate options appear second
215
LNL-600XA Backplane
Internal Layout – module mounts on backplane
8-way
power
fusing
module
– A: LNL-1100(-S3), LNL-1200(-S3), LNL-1320(-S3), LNL-

2220, LNL-4420 (2 in total)
– B: LNL-500, LNL-8000, LNL-3300 (2 in total)
– C: LNL-1300(-S3) (4 in total)
– D: LNL-1300e, LNL-2210 (4 in total) (see following)
216
LNL-600XA 2 x Plates
Internal Layout – module mounts on plates
– E: LNL-1000, LNL-1100(-S3), LNL-1200 (-S3), LNL-

1320(-S3), LNL-2220, LNL-4420 (2 in total)
– F: LNL-500, LNL-8000, LNL-3300 (2 in total)
– G: LNL-1300(-S3) (4 in total)
– H: LNL-1300e, LNL-2210 (4 in total) (see following)
217
LNL-600XA 2 x Plates
Internal Layout – module mounts on plates
Notes about LNL- 1300e and/or the LNL-2210
– When the LNL-1300e and/or the LNL-2210 are used on
the back plate of the LNL-600XA (rear position), the first
hinged plate (middle position) cannot be used and must
be left out to create room for the Ethernet connection
– When the LNL-1300e and/or the LNL-2210 are used on
the first hinged plate (middle position), the second
hinged plate (front position) cannot be used and must be
left out to create room for the Ethernet connection
– The second hinged plate (front position) cannot support
the LNL-1300e and/or the LNL-2210
218
LNL-2/4/600XA parts
For enclosure only without power supply
and LNL-600XA plates add –ENC to part
– e.g. LNL-600XA-ENC
For power supply only to add to an
existing enclosure or service spare add –
PSU to part
– e.g. LNL-600XA-PSU
For the two plates that mount inside a
LNL-600XA-ENC enclosure add –SET to
part
– e.g. LNL-600XA-SET
Replacement 8 additional power fuse
module for LNl-600XA, use LNL-FUSE-8
219
Legacy Enclosures and Power Supplies
Power Supplies with Enclosures
– LNL-400X-CE220P2
• 230 VAC / 50Hz input
• 12VDC 4A output
– LNL-400X-CE220D provides 24V or 12V
• Suitable for 2 standard PCBs (LNL-1320 in size)
• 394 x 318 x 115mm
• LNL-400X-CE220DP2 has 12V/24V output
– LNL-600X6-CE220
• 230 VAC / 50Hz input
• 12VDC 6A output
– LNL-600X6-CE220D provides 24V or 12V
• Suitable for 6 standard PCBs (LNL-1320 in size)
• 610 x 458 x 115mm
220
HELP: 220/230Vac connection by qualified Electrician only. Ensure that enclosure is earthed.
Legacy Enclosures
Enclosures only
– LNL-CTX
• Supports 2 standard size printed circuit
boards (PCB)
– LNL-CTX-6
• Supports 6 standard size printed circuit
boards (PCB)
221
HELP: Above enclosures without Power Supply can be used in EMEA region
LNL Controller Ports
LNL Controller Port Numbering
– Refer to specific controller data
for available ports on each
model
– Port 1 is Primary serial upstream
port or secondary upstream CONTROLLER(s)
when LAN is primary Upstream

• Series One (legacy) boards use
Port 6 for secondary Upstream
222
Wiring Downstream Communications
Each Downstream port hosts several Downstream
Devices via RS-485 Multi-drop wiring
Cable end-to end length:1.2km
Downstream Devices Downstream Devices

CONTROLLER
Device Device Device Device
2 3
Device
Device Device
Device
If using the LNL-1300e as a downstream device a

TCP/IP connection is required
223
Expanding RS485 Downstream Ports
Star Multiplexer (LNL-8000)
– 8 RS-485 Downstream Ports from 1
Each Downstream port hosts up to CONTROLLER
8 Downstream Devices via RS-485
Multi-drop wiring
1 RS-485 Port to ISC
Does not increase Downstream STAR MULTIPLEXER
device capacity of Controller
Only method for Star-wiring RS485
224
RS-485 Cabling
1219 metres (4000 feet) - maximum cable
length end-to-end
2 pair twisted shielded pair Belden 9842
1 pair twisted shielded pair may be used
within metal conduit where conduit forms
an earthed screen
Two
Twisted
Pairs
Shield Use one twisted pair for Data
225
2-Wire Communication
TRx+, TRx-, SG (Signal Ground)
– Devices connected by like terminals
– Failure to use SG may cause communication errors
– Alternative identification is; A, B, GND
TRx+ TRx+
TRx- TRx-
SG SG
Bond one end to Earth only

226
2-Wire Communication multi-drop
Join Shield
227
RS-485 Termination
Two terminations to be used per line
– For increased reliability over extended distances
• Minimizes external noise and signal reflection
– Device terminated at each end (End of Line)
– Termination done via on-board Jumpers
– Termination drawings for each component in
hardware installation guide
Device orientation
– Access Panel at beginning of line (typical)
– Access Panel in the middle of line
228
Downstream Hardware Addressing
Each downstream hardware board, controlled by
an Access Panel or Wireless Gateway, requires a
unique ID
– LNL boards use Binary Addressing Scheme
• Downstream Port number + Binary Address
• LNL-1300e uses MAC address
229
HELP: Refer to Hardware User guide for full addressing information
LNL Hardware Addressing
Each downstream hardware board, wired from
an Access Panel, requires an address for
proper communication
Addressing is unique for each downstream
device on one port
Addresses can be duplicated between ports
Board addressing is accomplished by using
the dip switches or Jumpers/Links
Addressing Schemes:
– Where 32 downstream devices are supported: 0-31
230
HELP: Some ISCs can use RS485 upstream with address range 0-7
LNL Hardware Addressing
Dip Switches 6 and 7 are used for baud rate
– Turn both of these ON for 38,400 (Fastest)
Dip Switch 8 is for Encryption
– Turn off unless encryption is configured
Addressing configurations/values can be found in
Crib Notes and/or in the Hardware Installation Guide
– Uses Binary for dip switches 1–5
– Example Dip Switch Binary Value
• 1 ON
1 1
• 2 ON
• 3 OFF 2 2
• 4 ON
• 5 ON
3 4
– Is address 27 4 8
5 16
231
Hardware RS-485 Termination
Termination of the hardware boards is needed
for effective communication on the RS-485
cabling
Termination is accomplish per board using a
Jumper(s)
– See hardware User guides for locations and ID of
links
Default Termination of a new board is ON
– Must remove jumper(s) on hardware board(s) that are not at each
end of the RS-485 cable run
232
Alarm Inputs
An Auxiliary input can be wired and configured
for any additional or required input component
(e.g. motion detector or panic button)
A Dedicated input can be wired for one use only
(e.g. Tamper Input, Power Supply Fault, Request
to Exit Button or Door Contact)
233
Supervision of Alarm Inputs
Unsupervised
1KΩ
1KΩ
Supervised
Alarm Contact
Normally Open Or Normally Closed
234
Alarm Outputs
A Dedicated Output is an output utilized for a
specific purpose (e.g. Door Strike on Reader
Interface Modules)
An Auxiliary Output can be wired and configured
for any additional or required output component
(e.g. Lights or sirens etc.)
Outputs States
– Active, Deactivated, Pulse (5 seconds by default)
235
Alarm Output Protection
Inductive loads will require contact protection to
maintain contact life of 500,000 operations
– Diode for DC devices
• Diode should have ten times reverse breakdown voltage as
the circuit voltage
– MOV (Metal Oxide Varistor) for AC devices
– Effect of no protection:
Damaged Normal
236
HELP: Diode part number 1N4004 is usually suitable
Alarm Output Protection
Output Diode is located close to the

Load (Strike in this example) Load
Module N/C (Strike)
C
N/O
Diode
Fuse
Typical output circuit with DC

power applied. Diode conducts
when power is removed.
DC + -
Source
237
ISC LEDs
LNL ISCs contain 3 status LEDs:
– LED A or 1 – Power (blinks rapidly)

– LED B or 2 – Upstream Communication (On when
communication is in process)
– LED C or 3 – Downstream Communication (On when
communication is in process)
*(Series 2 Controllers have additional LEDs for

status and inputs.)
238
Downstream Panel LEDs
LNL Downstream Panels contains 2 status
LEDs
– LED A – Power (blinks rapidly)
– LED B – Communication to ISC (On when
communication to ISC is in process)
Input LEDs (series 2)
Reader activity (series 2)
All Output have ‘Active’ LEDs
239
BlueDiamondTM Mobile Readers
Use a Smartphone Application to open door
Cloud based Credential server account
Mobile Credentials managed from OnGuard
Directkey Toolkit (to manage the readers)
BlueDiamond App for iOS and Android
Multi-tech models offer simultaneous support for
125kHz proximity cards
HID® Proximity
AWID® Proximity
CASI/GE Security ProxLite
13.56MHz Smart Cards
Mifare DESFIRE EV1/EV2
Mifare Classic - ISO 14443
Vicinity Card Serial Number - ISO 15693
HID® iClass Card Serial Number (CSN)
Visit http://elearning.lenel.com for further education
240
OnGuard-Core
ACCESS PANELS OR ISC’S
241
Lenel Access Panels - Series 2
LNL-2210 LNL-2220 LNL-3300 LNL-4420
242
Access Panels (or ISC)
An Access Panel (or Intelligent System Controller)
is a requirement for hardware configuration
– Must have at least one for an access control system
Multiple and different Access Panels types may be
deployed based on the needed hardware
components (number of readers, motion
detectors, other)
An Access Panel, or ISC, is the link between the
OnGuard software and the downstream hardware
– ISC = Intelligent System Controller
243
Access Panels (cont.)
Bi-directional upstream communication with the
OnGuard software
Bi-directional downstream communication with
all dependent devices
– Alarm Panels
– Reader Interface Modules
Network (TCP/IP) / RS-232 / RS-485 / Modem
Reader
OnGuard
Server Access RIM or
Panel AP
RS-485 Motion
Or Detector
TCP/IP
244
Upstream and Downstream Comms
Upstream Downstream
Direct Connect Direct Connect
– RS-232 – RS-485
• 50 feet / 15m
• Belden 9610 or equivalent • 4000 feet / 1219m
• Belden 9842 or
– RS-485
equivalent
• 4000 feet / 1219m
• Belden 9842 or equivalent Network (TCP/IP)
Network (TCP/IP) – LNL-1300e only
Dial up
245
HELP: Not all Access Panels offer all four upstream communication choices
Access Panel Memory
Memory to store hardware, cardholder, and event
related items
Available memory on panels for database
• LNL-2210 has 6 MB – Available flash storage
• LNL-4420 has 96MB – Available flash storage
Available memory for Events
• Up to 50,000 events can be stored
• Backed up by Lithium battery
246
Replacing Series 1 for Series 2
Power
– Series 1: 12AC or 12VDC
– Series 2: 12-24VDC
• Note DC Power will be required if swapping S1 to S2
LEDs
– Series 2 has more diagnostic LEDs
Mixed Series
– Series 1 and 2 can be mixed downstream
LNL-1300 Series 1
– Does not support flash firmware – limited lifetime
247
Access Panels - Series 2
LNL-2210, LNL-2220, LNL-3300, LNL-4420
RS485 Maximum Maximum Maximum Memory Upstream Max Reader
Downstream Downstream Downstream Downstream Available Ports Supported
Panel # Ports Devices RIM Panels Alarm Panels
LNL-22101 1 8 85 85 6M 1 176
LNL-2220 1 323 325 165 6M 1 646
LNL-3300 2 32 per 325 325 15M 22 4 64
port
LNL-44207 23 32 per 325 325 16M 1 646
port 96M8
1 For downstream device support with 0 or 1 onboard reader used
2 Both upstream ports must be connected to the same LS Communication Server
3 Including the onboard RIM
4 2 with optional LAN adapter fitted, 1 otherwise
5 Maximum via network and via RS485 and combined
6 Including Onboard Readers
7 OnGuard 7.2 or later is required
8 OnGuard 7.4 or later is required
248
Access Panels - Series 2
LNL-2210, LNL-2220, LNL-3300, LNL-4420
PoE Capable CTX(6) Mounting US Tripple- Built-in RIM Upstream Offline Event BACnet Support
Gang Back box Buffer
Panel # mounting
LNL-CONV-1 Ethernet
LNL-2210 Yes Yes Yes 50,000 No
Ethernet
LNL-2220 No Direct No Yes RS232 50,000 No
Modem
Ethernet
LNL-3300 No Direct No No RS232 50,000 No
RS485
Modem
LNL-4420 No Direct No Yes Ethernet 50,000 Yes

RS232
Modem
249
Access Panels - Series 2 (cont.)
On-Board RIM LNL-2210, LNL-2220 and LNL-4420
Doors Directly Supported Readers Directly Supported
LNL-2210 1 21
Single Door Controller
LNL-2220 2 2
Dual Reader Controller
LNL-4420 2 2
Dual Reader Controller
1 When not using downstream support capability, otherwise 1
250
LNL4420 BACnet
BACnet (HVAC protocol)
devices are now supported
by OnGuard 7.3 via LNL-
4420 only
– LNL-4420 acts as a BACnet
Server
– 63 points can be exposed
on one LNL-4420
• Physical inputs of the LNL-
4420 and downstream
panels (including aux inputs Alarm Panel points marked to be
on door controllers) exposed to BACnet Client (BBMD*)
• Virtual outputs, which are
State changes of OnGuard Points
settable state registers which
can be set by OnGuard will update status in BACnet Client
and/or the external BACnet
client(s) BACnet is a common protocol used
in HVAC equipment
251
LNL-3300 Dual Path Communications
The following Secondary Upstream Options are
available: Primary Secondary
– LNL-3300 RS232/485 Built-in Ethernet

Built-in Ethernet RS232/485
Ethernet Adapter
Modem
Modem None
– Only one port is active

– Switch-over is automatic if Primary fails
– Switch-back is automatic if Primary restores
– Both ports must be hosted by the same LS
Communications Server
252
LNL-4420 Additional Memory
With OnGuard 7.4 and latest Firmware in a LNL-
4420 the memory available for storage of
cardholder’s badges, access levels and
configuration can be increased to 96MB
This for example this allows for >1,000,000
badges with up to 16 Access levels per badge
– If additional features of the LNL-4420 are deployed
this number will fall
– Enable via System Administration > System Options
> Hardware Settings
253
Non-Lenel controller migration
Lenel’s ‘LNL’ Mercury hardware carries a OEM
code that needs to be correct to connect with the
OnGuard system
Systems Integration Group (SIG) can issue a
license key which will allow ‘foreign’ Mercury
panels connected to OnGuard to be flashed with
OnGuard Firmware
A Migration Request form must be completed
All future system expansions must use Lenel
supplied ‘LNL’ hardware
– This offer is for take-over ONLY
254
Ethernet Adapter
Lantronix Devices
– LNL-ETHLAN-MICR125 10/100Mbps
• Secondary on LNL-3300
• Secondary on LNL-4420
– Primary on legacy LNL-500 & LNL-2000
• Includes Stand-offs
– Legacy LNL-ETHLAN-UDS
• Lantronix UDS1100 Micro Serial Server
• External device with external power supply
• DB25 to RJ45 (10/100baseT)
• For use with Series 1 Access Panels
• Used for third-party product integration
– Consult Hardware user guide for set-up instructions
255
Wiring Details
Consult the OnGuard Hardware User Guide or
Hardware crib book for exact wiring schematics
and tables for each product
256
OnGuard-Core
ALARM PANELS
257
Alarm Panels
LNL-1100 LNL-1200 LNL-1300e
(Not to scale)
Series 3 boards
258
Alarm Panels
Used for auxiliary functionality
Inputs
– Monitors the state of hardware (open or closed) (e.g.
Motion detectors, light switch, panic button, etc.)
Outputs (relays)
– Hardware component that can be activated or
deactivated (e.g. Light bulb, sirens, strobes,
sprinklers, etc.)
259
Alarm Panel Inputs and Outputs
Input
ISC ALARM PANEL
Output
Number of Auxiliary Number of Auxiliary

Inputs Outputs
LNL-1100(-S3) 16 2
LNL-1200(-S3) 0 16
LNL-1300e 4 2
260
LNL-1100(-S3) LEDs
LED functions
– Board status
• A - Heartbeat
• B - Communication
– Tamper/power fault status
• CT – Cabinet tamper
• PFL – Power fail
– Alarm input status
• 1-16 Input in active alarm state
– Relay status
• K1-K2 Corresponding to relay energized
261
LNL-1200(-S3) LEDs
LED functions
– Board status
• A - Heartbeat
• B - Communication
– Tamper/power fault status
• CT – Cabinet tamper
• PFL – Power fail
– Relay status
• K1-K16 Corresponding to relay energized
262
LNL-1300e in ICM mode
Input Control Module (ICM)
– Supports connection to monitor up
to 4 alarm devices
• Supervised or Unsupervised
• N/O or N/C contacts
– Includes 2 on-board relays (Aux 3 stickers are provided
with MAC address
Outputs)
– No readers/doors if in ICM mode
2 dedicated inputs
– Cabinet tamper (NC contact) PoE vs 12V link under
TB5 (remove TB5 for
– Power failure (NC contact) access)
• Jumper with wire if not using
263
LNL-1300e in ICM mode (cont.)
PoE (802.3af, 12.95 watts)
– Communications with ISC is via TCP/IP only
Ethernet Recommendations
– 10/100 MBps can be used when NOT using PoE
• Board can be powered from a regular power supply
– 10 MBps should be used when using PoE
• Switch must be configured to only allow 10 Mbps
• Using 100 Mbps may cause instability
Reports to any of the following ISCs with latest
firmware:
– LNL-2210, LNL-2220, LNL-3300, LNL-4420
For other details refer to LNL-1300e as a RIM
264
Wiring Details
265
OnGuard-Core
READER INTERFACE
MODULES
266
Reader Interface Modules
LNL-1300 LNL-1320 LNL-1300e LNL-2220
LNL-4420
LNL-2210
(Not to scale)
Series 3 boards
267
Reader Interface Modules (RIM)
Door hardware can have up to five
components:
– Door Contact
• Allows for monitoring of door status/state
• Dedicated input
– REX – Request to Exit
• Button or sensor operated to exit through door
• Dedicated input
– Strike – Locking device
• Powered door component used to release/energize door for entry
• Dedicated output
– ‘IN’ Reader
• Allows the person to identify themselves at the door for entry
– ‘OUT’ Reader
– Allows the person to identify themselves at the door for exit
268
General Reader Interface Functions
Provides interface to several reader data formats:
– Wiegand (D0/D1) To ISC
– Magnetic (Clock/Data)
– CASI F2F and SF2F
– RS485
• OSDP (V1) Reader Interface
• OSDP (V2) Module
• Bioscrypt / Safran Morpho
• LNL-CK
Eight (8 or 16) simultaneous card formats supported
– Interpretation of the bit-string received by the reader
Interface Module from the reader
Dedicated Inputs for door contacts, REXs
Up to 500 feet/152 metres
– Auxiliary inputs 6 Conductor cable (Belden
Dedicated On-board relays for door strikes 9536 or equivalent)
– Auxiliary outputs 4 Conductor cable if using
OSDP
NOT ALL GENERAL FEATURES ARE AVAILABLE
ON ALL READER INTERFACE MODULES
269
RIM Communication
To ISC
– 2-wire RS-485 cabling to ISC (Belden 9841 or
equivalent, recommend Belden 9842 for dedicated
SG conductor wire)
• TR+, TR-, Signal Ground
– M5 Enclosure provides back-plane RS485
– LNL-1300e uses Ethernet only
To Readers
– 6 Conductor wire (Belden 9536 or equivalent)
Cable Cross
Reference Table in
Hardware
Installation Guide
(Section 1)
270
Reader Modules
Total Doors Auxiliary Auxiliary
Readers Inputs Outputs1
LNL-1300(-S3) 1 1 0 1
LNL-1320(-S3) 2 1 or 2 21 2
LNL-2210 22 1 0 1
LNL-2220 2 1 or 2 21 1
LNL-4420 2 1 or 2 21 1
LNL-1300e 2 1 23 13
1 Per Reader
2 1 reader if downstream port is utilized
3 Total (reader 1 only)
271
LNL-1xx0 Series 3 boards
LNL-1100, LNL-1200, LNL-1300, LNL-1320 will
move to series 3, over time
SKU: LNL-1xx0-S3
Recognizable by red board, instead of green
Offers additional reader protocol support not
possible with Series 2 listed here
Series 3 will be shipped when series 2 stock is
exhausted
– If a project specifically requires series 3 please
discuss with Product Management
Series 3 is backwards compatible and can be
used to expand existing OnGuard sites
• Functionality limited by the version of OnGuard
272
LNL-1xx0 Series 3 boards
Note: DIP Switches

instead of Links on
LNL-1300
Link on = Switch ON
273
RIM Series 2 Capabilities
RIM Capabilities Table (1 of 3)
Reader Data Format Outputs Aux
1 2 1 2 3 4 5 6 DC REX Power1
Bioscrypt RS485
F2F Format
Mag with Wiegand
Output
LNL-1300
Magnetic
OSDP Protocol
SF2F Board Edge
SF2F Reader Inputs
Wiegand None 5A (strike) 1A (aux) - - - - 1 1 80mA
Bioscrypt RS485 Bioscrypt RS485
F2F Format F2F Format
Mag with Wiegand Mag with Wiegand
Output Output
Magnetic Magnetic
LNL-1320
OSDP Protocol OSDP Protocol
SF2F Board Edge2 SF2F Board Edge2
SF2F Reader Inputs SF2F Reader Inputs
Wiegand Wiegand\Handkey
Handkey RS485 RS485 5A (strike) 5A (aux) 5A (aux) 5A (strike) 5A (aux) 5A (aux) 2 2 300mA
1 Current limited power for external load including reader(s)

2 Both readers must be SF2F Board Edge if used
274
1 2 1 2 3 4 5 6 DC REX Power1
Bioscrypt RS485
F2F Format
Mag with Wiegand
Output
Magnetic
LNL-2210 OSDP v2 Biometric F2F Format
OSDP V2 Secure Cannel Mag with Wiegand
OSDP Protocol Output
SF2F Board Edge Magnetic
SF2F Reader Inputs SF2F Board Edge
Wiegand Wiegand 2A (strike) 2A (aux) - - - - 1 1 650mA
F2F Format F2F Format
Output Output
Magnetic Magnetic
LNL-2220 OSDP v2 Biometric OSDP v2 Biometric
OSDP V2 Secure Cannel OSDP V2 Secure Cannel
SF2F Board Edge2 SF2F Board Edge2
SF2F Reader Inputs SF2F Reader Inputs
Wiegand Wiegand 5A (strike) 5A (aux) 5A (strike) 5A (aux) - - 2 2 300mA

2 Both readers must be SF2F Board Edge if used
275
1 2 1 2 3 4 5 6 DC REX Power1
Output Output
Magnetic Magnetic
LNL-4420
OSDP v2 Biometric OSDP v2 Biometric
Wiegand Wiegand 5A (strike) 5A (aux) 5A (strike) 5A (aux) - - 2 2 300mA
F2F Format
Mag with Wiegand
Output
Magnetic
OSDP v2 Biometric F2F Format
LNL-1300e
OSDP V2 Secure Cannel Mag with Wiegand
OSDP Protocol Output
SF2F Board Edge Magnetic
SF2F Reader Inputs SF2F Board Edge
Wiegand Wiegand 5A (strike) 5A (aux) - - - 1 1 650mA
276
RIM Series 3 Additional Capabilities
RIM S3 Additional Capabilities Table (1 of 1)
Reader Data Format
1 2
LNL-1300 capabilities plus:
LNL-1300-S3 OSDP v2 Biometric
OSDP V2 Secure Cannel
Authenticated Readers1 None
LNL-1320 capabilities plus: LNL-1320 capabilities plus:

LNL-1320-S3 OSDP v2 Biometric OSDP v2 Biometric
Authenticated Readers1 Authenticated Readers1
1 Requires LNL-4420 as the ISC, used by US Government
277
Typical Reader to RIM wiring
Wiegand or Clock & Data OSDP (v1 or v2)
12V Power 150mA Max 12V Power 150mA Max
VO VO
Green LED
LED LED
Buzzer or Red LED
BZR BZR
Wiegand D1 or Clock TR+
D1/CLK D1/CLK
Wiegand D0 or Data Line TR-
D0/DAT D0/DAT
Power 0V Power 0V and Signal Ground
GND GND
Connect shield to Earth Point

– not the GND terminal
For colours refer to manufacture's data
278
HELP: Leave BZR unconnected if reader does not have a buzzer/sounder. If reader has second LED line connect to BZR terminal.
Current Limited Reader Power
Reader power
Applies to LNL-1300(-s3), LNL-1320(-S3), LNL-1300e, LNL-2210,
LNL-2220 and LNL-4420
– Maximum current draw is 150mA
• Maximum for Series 1 = 80mA
• Maximum for LNL-1300 = 80mA
If more power is required wire reader power
direct from Power Supply
– Reader Power should be fused
Fuse
PSU RIM Reader
279
Wiring Details
280
LNL-2210 Downstream Configuration
CLK/D1 = TR+
TCP/IP
DATA/D0 = TR-
Communications
GND = GND
Reader Port 2
LNL-1300e only
Up to 8
TOTAL
Downstream
Devices
RS-485
Communications
281
OnGuard-Core
PERIPHERAL BOARDS
282
LNL-8000 Recommendations
Topology
Example ISC
283
HELP: Port 1 RS232 mode not utilized with OnGuard
LNL-8000
Jumpers
– Termination per port
Port 1 = to ISC’s downstream
port
Port 2- 9 downstream
LEDs for status indication for
each port
8000 is NOT an addressed
device
– Does not count as a device
downstream device
DIP switches are for baud rate
284
LNL-8000 Recommendations
The following applies to the LNL-8000 module
– DIP Switch Positions for 38,400:
• 1=ON
• 2=OFF
• 3=ON
• 4=OFF
• Do not fit any EOL links on the port that LNL-8000 is
connected to including JP2
• This may rule out using this communications port for any other
panels in remote enclosures
• Max cable length for the port that LNL-8000 is connected to
is 300m (not just the cable length to this panel, but the
whole cable end-to-end)
• Maximum of 4x LNL-8000’s per ISC port
• Ports 2-9 must be terminated as normal for RS 485
285
Hardware Reference Documents
Hardware Installation Guide
Field Hardware Crib Notes
Series 2 DIP Switch notes
Alternative Reader Wiring Guide
Please review these documents now
286
HELP: Start > All Program > OnGuard > Documentation > Hardware > (select manuals)
Additional RIM Hardware
Wiegand to (S)F2F Interface Units
WIU-2 (430187001)
– To allow LNL-1380-8RP to interface to
Wiegand readers
• Converts Wiegand to F2F protocol
– 26, 32, 35, and 40-bit formats
• Unsupervised Inputs
• Enclosure 521005001 required
WIU-4 (430160001)
– To allow LNL-1380-8RP to interface to
Wiegand readers
• Converts Wiegand to SF2F protocol
– 26, 32, 35, and 40-bit formats
• Supervised Inputs 1K/1K
• Enclosure 521005001 required
287
Additional RIM Hardware
Reader Junction Box (RJB) (450222001)
– To facilitate simpler wiring of door hardware when
an F/2F reader is used
– Interface for:
• F/2F reader
• Request to Exit (REX) switch
• Door Contact
• Strike / Lock with relay and fuse
• F/2F cable back to RIM
– Contains all required terminals and inter-linking plus
relay and fuse for Door Strike Release via F2F
288
Legacy ‘NGP’ Security Series Controllers
NGP-22xxy and 33xxy controllers
– Increased capacity
– Embedded Intrusion detection
facilities xx= 00 No on-board doors
xx= 20 2 on-board doors 4 readers
Reader Modules y= i if intruder mode capable
y= (blank) if not intruder mode capable
– NGP-1300-U
– NGP-1320-U
– NGP-1320
Alarm Panels
– NGP-1100-U Attend Specialized classes for
information and certification
– NGP 1200-U http://elearning.lenel.com
– NGP-1100 & NGP-1208
289
Legacy ‘OCF* CASI’ Series
CASI M2000 (M2000PXNplus)
CASI M5/M3000 (M5000 and M3000)
Reader Modules
– For M5/M3000:
• 8RP
• 2RP/2SRP
• 20DI/16DO
Alarm Panels
– For DirecDoor:
• DDIO
– For M5/M3000: Attend Specialized classes for information and
• 16DO certification
• 20DI http://elearning.lenel.com
*OnGuard Compatible Firmware
290
Lenel ‘ILS’ Integrated Locking System
Offline and wireless
electromechanical built for
OnGuard
– Offline
– Wireless connectivity option
– Wide range of locks, handles and finishes
Attend Specialized classes for information and

certification
http://elearning.lenel.com
291
Legacy LNL-500/1000/2000
Access Panels
Also:
– LNL-500B Biometric
Gateway
Referred to as Series 1
Discontinued product
 Refer to Hardware User Guide
for configuration
292
Legacy LNL-xxxx-U
Reader Interface
Modules
Alarm Panels
Star Multiplexer
Discontinued product
 Refer to Hardware User
Guide for configuration
293
Honeywell Panel Support
Equivalent products (core functionality)
OnGuard License required

– SWG-1640
– Allows for ‘take-overs’
Training: http://elearning.lenel.com
294
Honeywell Panel Support
Separate LS Communications Server(s) is
required for the Honeywell Hardware
The Honeywell LS Communications Server(s)
Workstation requires specific ACS.INI file entries
– See DOC-1116-EN-US_Honeywell_OnGuard_Integration.pdf
Note: Downstream LNL and
HON panels cannot be mixed
295
Retro-fitting CASI Boards
Micro 5 Series boards are
used in FCWnx,
PicturePerfect and other
products that are being
phased out
Swap-out boards
– Access Panel LNL-3300-
M5
– LNL-1100-DI
– LNL-1200-16DO
– LNL-1200-16DOR
– LNL-8000-MCOM
LNL-8000-M5
– Expansion board
296
Retro-fitting CASI Boards
Replacement for CASI
M2000
Swap-out boards
– LNL-1340-M2K
• For use only with LNL-
3300-M5 Access Panel
LNL-3300-M5 LNL-1340-M2K
297
Retro-fitting ACU Boards
ACUXL , ACURS2 &
ACURS4 boards are used
in Facility Commander,
FCWnx, Diamond II and
other products that are
being phased out
Swap-out boards
– Access Panel LNL-3300-
ACUXL
– Intelligent Dual Reader
Controller LNL-2240-RS4
Existing downstream
boards remain
298
Retro-fitting C-Cure Boards
C-Cure iStar boards are
used by Software House
Swap-out boards
– LNL-3300-GCM
– LNL-1380-ACM
– LNL-1100-I8
– LNL-1200-R8
All existing cabling,
enclosures and power
supplies remain
299
ASSA ABLOY Aperio® v3
Battery-powered hardware within door
Radio connectivity to Aperio Hub
ISC /
Wired connectivity from Aperio Hub to Access Panel
OnGuard ISC
Aperio Hub with V3 firmware
– Supports 8 locks
– Communicates over controller RS-485 bus
Supported on all ISCs Hub
– LNL-2210
– LNL-2220
– LNL-3300
IN 100
– LNL-4420
Hub SKU: AA-AP-AH30RN1
Lock License SWG-1800-X-PL
– Or SWG-1800-N-PL
• when lock is supplied by Lenel Aperio is a registered Trademark of ASSA Abloy
300
OnGuard-Core
HOLIDAYS AND TIMEZONES
301
Holidays and Timezones
Timezones encompass time of day, days of week,
and holidays
Timezones/Holidays are stored on the access
panels
A Timezone/Holiday may be used to:
– Control cardholder access (access level)
– Control online mode of card readers
– Mask alarm inputs
– Activate outputs
– Dial up an Access Panel
– Log events to the database
302
HELP: System Administration > Access Control > Timezones
Holidays
Holidays can be configured in OnGuard to manage
cardholder and hardware status changes
– Mask/UnMasking inputs on a holiday
– Cardholder access into a facility on a holiday
A holiday may be of Type 1-8 or multiple types
– Used for ease of maintaining and managing holiday categories
– All Holidays can be placed in one Type or split between multiple
Types (1-8)
303
HELP: System Administration > Access Control > Timezones > Holidays
Holidays
A single Holiday duration may be up to 366 days
Holidays can be set to recur annually
– LS Linkage Server manages updating the holiday if
the ‘Repeat yearly’ checkbox is enabled for a holiday
Holiday type names may be customized
Holidays consist of Type, date, and duration
– The number of Holidays is configurable
• 20 to 255
• Default is 255 and configured under System Options >
Hardware Settings
304
Holidays – Repeat yearly
Configure a holiday to repeat yearly
– Linkage server must be running in order to update
holidays
– Once the holiday occurs, the year is updated in the
database and transferred to the access panels when
a download occurs
• When this feature is enabled, the holiday's year is
automatically recalculated during panel downloads
• Updates year to year only
• Any associated additional days off surrounding the holiday
may need to be adjusted accordingly
305
Timezones
Timezones
– A Timezone consists of: Time of day, days of the week, and
holidays
– The number of Timezones is configurable
• Default is 255 and is configured under System Options >
Hardware Settings
– There can be up to six intervals in each Timezone
306
HELP: System Administration > Access Control > Timezones > Timezones
Timezones
“Never” and “Always” are default Timezones
Can not be modified or deleted
A Timezone may be activated on holidays by type
(H1, H2, H3…H8)
An interval may not cross a date change
Two intervals must be used
A Timezone must have at least a single interval
with a start and end date in order to be
downloaded to the access panel(s)
24-hour clock is used for start and end times
307
Timezone Rules
A Timezone activates on the leading edge of
the minute
08:00 17:00
08:00 Timezone Interval 16:59

Start End
A Timezone deactivates on the trailing edge of

the minute
308
Timezones/Holidays
A holiday is treated as an exception date
– Example: An access level that uses an 8:00-5:00 Monday-
Friday Timezone will not work if the day is a holiday
A timezone may be configured to activate on a
holiday, if desired, by enabling the appropriate
holiday type checkbox for the timezone
A newly created Timezone will work on the next
Start or End time configured
– Example: if an 08:00 – 17:00 Timezone is created and applied
to an input at 10:00, the input will change status at 17:00
• A download to the Access Panel will be required if immediate action is
required or manually adjust via Alarm Monitoring
• Output status could be manually updated via Alarm Monitoring
309
OnGuard-Core
HARDWARE CONFIGURATION
310
Upstream Communication Alternatives
TCP/IP
External
LAN
Adapter
Dial-up
RS232-485 Access
Adapter RS232 Panel (ISC)
RS485
Consult ISC details for supported upstream options for each model
311
Access Control Modems
The Modem must be added first through the
operating system
Configuration includes
– Workstation where modem is connected
– Dialup modem name
– Refer to Hardware User Guide for additional information
312
HELP: System Administration > Access Control > Modems
Access Panels
Access panel communication parameters
– Name
– Online
• Communication with the LS Communication Server will be disabled
if the access panel is not online
313
HELP: System Administration > Access Control > Access Panels
Access Panel - Location
Location
– Workstation
• The computer running LS Communication server
that is servicing this access panel
– Address
– World Time Zone/Daylight Savings
LS Communications
Workstation name
314
HELP: System Administration > Access Control > Access Panels > Location
Access Panel - Connection
Connection options (model dependent)
– Direct (RS232 or RS485)
– IPv4
– IPv6
– DNS Host name
– Dialup (Modem)
315
HELP: System Administration > Access Control > Access Panels > Primary Connection/Connection
LAN/WAN
– The LS Communication Server uses the IP Address
configured in the Lantronix network adapter or the
configured IP address of native network access panels
(LNL-2210, LNL- 2220, LNL-3300, LNL-4420)
– Either IP Address OR Host Name can be used
• Default port is 3001
– Network is the only option for LNL-2210
316
If there is no DHCP server the LNL-
2210/2220/3300/4420 ISCs will be at IP address
192.168.0.251, this will need to be changed
If there is a DHCP server and name resolution the
above ISCs can be accessed by adding the MAC
address information into the host field
– MAC address can be found on the sticker
317
Dialup
– Configuration:
• Modem to be initially used
• Timezone that panel will use to dial-back
• Phone number of host and access panel
• Event threshold that panel will use to dial-back
318
Initial Dialup Panel Configuration
– The host PC must initially call the panel
• Must be done manually through alarm monitoring
– The host will then automatically download the database
• Access Panel firmware can be updated manually by right clicking on
ISC in Alarm Monitoring
Dialup Behavior
– Host to panel connection will only occur on user action
• Right click on the panel in Alarm Monitoring and select Connect
– Panel to host connection will occur:
• Upon activation of a Timezone
• When the event threshold is reached
• Via function execution in Local or Global I/O
319
HELP: System Administration > Access Control > Access Panels > Primary Connection
Secondary Upstream Connection
The Always Timezone may be assigned to the
secondary dialup connection
– Modem will automatically call from LS Communication Server
and remain connected until primary path re-established
– Applies to LNL-3300 and legacy LNL-2000
320
HELP: System Administration > Access Control > Access Panels > Secondary Connection/Connection type
Access Panel - Options
Access panel setup parameters
– Critical settings are
• Cardholders, PIN type, Toggle/Unlock mode, Store dates
– Ports, Feature capacity level and memory
• Applies to legacy LNL 500/1000/2000 ISCs only
321
HELP: System Administration > Access Control > Access Panels > Options
PIN Type
• Select from None, 4, 6 or 9 digit
• Default is none
Cardholders
• Will allocate an appropriate amount of memory on
the ISC
Event Capacity
• How many events will the access panel store if
not communicating to the OnGuard server
• Value varies on Series 1 panels based on the
configuration options selected
• Event Capacity is fixed at 50,000 for the Series 2
panels
322
Device count
• Controls the number of downstream devices that
may be added to the access panel
Store Expiration / Activation Date
• Stores the badge expiration and activation
information on the access panel
• The options are:
– Not Enforced
– Date Only
– Date and Time
• Time must be configured to be used in the General
Cardholder Options
323
LNL-2210 Configuration - Options
LNL-2210 can be configured with up to 8
downstream devices
– Combination of Reader Modules and Alarm Panels
LNL-2210 configuration choice is:
– In and Out readers off the LNL-2210 reader ports
OR
– Reader off reader port 2 and 8 downstream devices
connected to reader port 1 and/or over TCP/IP
324
Access Panel - Diagnostics
Diagnostics
• Not checked until panel is brought up in Alarm
Monitoring
• Firmware revision/ DIP switch settings / Flash chip
size
325
HELP: System Administration > Access Control > Access Panels > Diagnostics
Notes Field
Notes may be added to all hardware devices
in System Administration
– Access Panels, Video Recorders, Additional
Hardware, Readers
– Limit of 1999 characters
– Can be viewed by operators
– Appears in reports
326
HELP: System Administration > Access Control > Access Panels > Notes
Right-Click Options
Add / Modify / Delete / Copy
Download
Set Clock
– Clock set using time on LS
Communication Server computer
Promote Access Panel
– No demote option
– Note, ensure there is sufficient
capacity for promoted ISC
downstream devices ISC must be
– Existing downstream devices are marked offline
associated with promoted panel before it can be
promoted
327
ISC Promotion
Promotion through the LNL panel series
Promoting an ISC can leave downstream
devices not associated to a port
1 1 6 1
LNL-500 LNL-3300 LNL-4420
2 3 2 3 2 3
328
LNL ISC DIP Switch Settings
Use of DIP switches while running On
– Set all OFF for normal use
4
– Forcing Web page credentials:
3
• SW1 ON
2
– admin / password (valid for 5 minutes)
1
Use of DIP witches at boot-up
– Initial start-up communication mode
– Factory reset
– Forcing known IP address (192.168.0.251)
See notes included with training materials on
other uses of these switches
329
Configuration Web Page
Configuration Web Page can be launched using
any of the following methods:-
– OnGuard’s Device Discovery Console
– Double click on the appropriate Series 2 Board in the
list
– Using a Web Browser
• Type address as the IP address for the board
– Configuration Web Page button located on the
Access Panel > Location page
330
HELP: System Administration > Access Control > Access Panels > Location
Device Discovery Console
The Device Discovery
Console supports discovery
for:
– Lenel Network Based
Panels Access Panels
• LNL-1300e will not be
discovered
– Micro 100, UDS-1100, etc. Features available
depend on product
– ILS WAP (Wireless Access
type
Points)
– Some IP Cameras
331
The login screen is presented
– Click on Login
332
When switch 3 is off, you may see the following
screen
– You may select “Continue to this website”
Reminder: the initial login is:

– Username: admin
– Password: password
– Must be used within 5 minutes of moving DIP Switch 1 to ON
333
Logon Warning
A warning dialog will be issued during login indicating
– No users have been added into the controller
– Dip Switch 1 is on, enabling the default admin|password
login
• Log-in must be completed within five minutes
• Only one successful log-in is permitted
• 3 incorrect attempts causes 1 minute lockout
– If additional users have been created and switch 1 is
turned off, the default user cannot login
334
Home Page
– User notes may be added
• Up to 250 characters
• Stored on the controller
335
HELP: Home
Network Page
– The IP address settings and host name settings can be changed
here
336
HELP: Network
Host Communication Page
– Used to configure primary and secondary ports (LNL-3300 only)
– AES encryption is an available option under Data Security
• Attend OnGuard Pro-Data class for further information
– Authorized IP Address will restrict what IP addresses can access
web configuration page
LNL-2220 LNL-3300
OnGuard-Core 7.4 EMEA Feb 2018 337

HELP: Host Comms
Device Information Page
– Provides information on the ISC
338
HELP: Device Info
Users Page
– User password strength option is available
339
HELP: Users
There are three
levels of access a Access View allowed Edit allowed
user can have Home page Level 2: Yes (cannot edit notes) Level 2: No
Level 3: Yes (cannot edit notes) Level 3: No
– Level 1 – Full Network page Level 2: Yes Level 2: No
Level 3: No Level 3: No
view/edit to all
Host Port page Level 2: Yes Level 2: No
screens Level 3: No Level 3: No
– Level 2 & 3 – Device Info page Level 2: Yes n/a

Level 3: Yes
View/edit
Users page Level 2: No Level 2: No
permissions as listed Level 3: No Level 3: No
in the table Restore/Default page Level 2: No Level 2: No

Level 3: No Level 3: No
• Pg. 139 of the
Apply Setting page Level 2: No Level 2: No
hardware Level 3: No Level 3: No
installation guide
340
HELP: Users
Users Page
– These settings are only visible when dip switch 1 is on
341
HELP: Users
Disable Web Server
– This disables the ability to configure the access
panel
– It can be re-enabled by switching dip switch 1 to the
ON position
Disable Bonjour
– This is the discovery protocol that the Device
Discovery Console uses
OnGuard users are notified when an on-line ISC’s
Web Sever is accessed (OnGuard 7.3 or later)
– Via Alarm Monitoring
342
HELP: Users
Enable Auto Save
– When enabled, setting changes will be saved to non-
volatile memory at the selected time interval
343
HELP: Autosave
The Auto Save page has the ability to detect if a reset
occurred prior to being saved to flash memory
Network diagnostic log can be enabled to write
network data while the DEBUG mode is enabled in the
Communication Server
344
HELP: Autosave
Load Certificate
– The load certificate option is not supported with
software using Lenel OEM code
345
HELP: Load Certificate
Apply Settings
– Apply Settings and Reboot the ISC for Network and
Host Communication changes to take effect
346
HELP: Apply Settings
Return all ISC DIP switches to OFF before Apply
and Reboot otherwise this message appears
347
OnGuard-Core
INTRODUCTION TO ALARM
MONITORING
348
Alarm Monitoring Logon
User Name and Password
Monitor Zone Selection
– This selection is available only if the monitor zone for workstation
or user has not been assigned
349
HELP: Alarm Monitoring
What is a Monitor Zone?
Monitor zones control what a user will
View/Monitor in the Alarm Monitoring program
A Monitor Zone associates:
– Access Panels / Devices
• Events will only be seen from Panels/Devices in the zone
– Events/Times
• The default event routing group is NONE (All Events Always)
350
HELP: Monitor Zones will be covered in detail late in this class
Main Alarm Monitoring Window
Total events and pending alarms are displayed
Right mouse button displays menu for user
action on alarm
351
Alarm View Configuration
Column selection and configuration
– Allows configuration of the following
• Which columns are visible in the window
• The order of the columns from left to right
– The sort order of events based on which
column is chosen
– Select Configure > Columns in Alarm
Monitoring
Display Seconds
– Select under Options menu
352
HELP: Alarm Monitoring > Configure > Columns & Alarm Monitoring > Options
Alarm View Configuration
Click on column header to reverse order
– Options for displaying default sorting order for
Time/Date controlled by Options menu
353
HELP: Alarm Monitoring > Options
System Status Window
Displays all the system hardware assigned to the
monitor zone
Click on View > System Status
Displays graphical animated icons representing
hardware status
354
HELP: Alarm Monitoring > View > System Status
Software Connection Error
– LS Communication Server is not started
– Start as a Service and Automatically is preferred
355
Access Panel or Device Type Mismatch
– Occurs when the options inside the Access Panel
differ from what the panel or device that is currently
configured for in the database
– To correct this situation, a download should be issued
to the Access Panel
356
Monitor Zone Connections
System Status window - Right Click on Monitor Zone
– Displays all communication server workstations that are
configured for the ISCs in the Monitor Zone
357
Floating Alarm Monitoring Windows
Alarm Monitoring on Multiple Monitors using
Floating Mode
– This will allow the user to manage multiple hardware windows and
improve the consistency and usability of the monitoring interface
– When in floating mode, the positions of the windows are retained when
Save Settings on Exit is enabled
Monitor 1 – Main Program Monitor 2 – Floating Status Window
358
Floating Mode
– The display mode of any Alarm
Monitoring internal window can be
toggled between standard and
floating behavior
• Accessed from the upper left System
Menu window icon
– When a window is in the floating
display mode, it can be positioned
outside the main Alarm Monitoring
window or onto another monitor
– Floating windows can be individually
managed from the Windows Task Bar
359
Alarm Monitoring Windows will vary in regard to
the System Menu when in Floating Mode
– Always on top will force the floating window to
remain on top of other windows
Cardholder and Group are not able to float
360
HELP: Alarm Monitoring > View > Badge Info
Status Bar - Breakthrough Options
Breakthrough Disabled
– Displays when any Breakthrough Option
is deselected
361
Status Bar - Hardware
Connection errors
– Shows any connection errors due to LS Communication Server
Offline hardware
– Controllers / Readers / Alarm panels
Workstation time
362
Status Bar - System Status Tree Window
Hardware Status Bar
– Viewing
• Shows what devices are being viewed based on the option settings
– Active count / Offline count / Mask count
• Shows the number of Active, Masked, or Offline devices in the
monitor zone
363
On-Board Battery Status
LNL-2220/3300/4420 Access Panels provide
status indication when the onboard battery is low
(2.5 volts or less)
– Supported for series 2 LNL Access Series controllers only
• LNL-2210 uses a rechargeable onboard battery and the
firmware does not perform the check
– Updates
• When panel is powered up
• Every 24 hours
• Whenever a Power Fault Input activates or secures
– System status text next to controller will indicate the battery to
be low
364
Hardware Status Refresh
A black X indicates hardware has
been marked off-line in System
Administration
A black X and status text indicates
hardware has been deleted in
System Administration
– Deleted hardware will be updated and
removed from the tree at next logon
A red X indicates that the parent
device is offline
A yellow X indicates that the
parent device is online but the
child device is offline
365
Controlling Access Panel Hardware
To interact with hardware items, right click on the
desired item
Commands may be optionally activated using the
left mouse button
366
Firmware Versions
System Status Window shows
firmware for Access Panel
Firmware Version
– Check Compatibility charts
– If “[Not Current]” is displayed then a
Firmware download is highly
recommended
367
Firmware vs. Database Download
Firmware – right click to activate
– Software used to control hardware
– Flashed to onboard memory
• Stays in memory even if power is lost
– Database download follows for Series 1 boards
– The panel suspends the processing of new events
while the event buffer empties to the database
– Once the buffer is empty, the panel reboots
Database - right click to activate
– System Configurations Note - Panel
operation stops
– Access Level and Badge Information
while Firmware is
– Stored in non-volatile memory (series 2) updated
• Stays in memory even if power is lost
368
OnGuard-Core
CONFIGURATION OF
ALARM PANELS
369
Alarm Panels
Alarm Panels
Alarm Inputs
Alarm Outputs
Input/Output Local Linkage
370
HELP: System Administration > Access Control > Alarm Panels
Alarm Panels
Adding Alarm Panels
– Name
– Panel
• Specifies which Access Panel the Alarm Panel is connected to
371
Alarm Panels
Communication Parameters
– Specify the port and address of the Alarm Panel
– Specify the type of Alarm Panel
– Specify downstream encryption settings
Provide the IP address for LNL-1300e devices
372
LNL-1300e addressing
IP Address is applied using utility on
Supplemental Disk 18 (or later)
Set Switches to ON ON OFF OFF (1,2,3,4)
– Re-boot board with S2
– Find board and assign
– Enter IP e.g.
122.210.005.017
Include leading zeros
– Add Subnet
– Add Gateway address
Set Switches to OFF ON OFF OFF (1,2,3,4)
– Re-boot board with S2 or power cycle
373
LNL-1300e addressing DHCP
If using a DHCP server to provide an IP address
allocate a fixed IP address on the DHCP server
based on the MAC address of the panel
The IP address of the LNL-1300e must not
change
– An unexpected change to IP address will
• Cause the RIM to go offline
• Introduce a security risk
Reminder:
– For reliable behavior use 10 Mbps switch if using
PoE
374
Terminology
Masking
– A command issued to a hardware device to conceal the event
• The event will not be sent to the system or database
Logging
– The process of sending an event to the database
By default OnGuard never masks events and
always logs events to the database
375
Alarm Inputs
Select the correct Alarm Panel
The input name and online status
The number of the input
376
HELP: System Administration > Access Control > Alarm Panels > Alarm Inputs
Alarm Inputs
Inputs may be configured as
– Supervised or Not Supervised
– Normally Open or Normally Closed
You may choose to log or mask the input alarm
during specific Timezones
377
Alarm Inputs
Entry Delay (seconds)
– Cause alarms to be delayed
• If input is Masked while entry delay is running the alarm is
cancelled
– With ‘Non-Latch Entry’ not selected an alarm is reported after
Entry delay expires regardless of the state of the input at that
time
– With ‘Non-Latch Entry selected an alarm is only reported
after Entry delay expires if the input is active at that time
Exit Delay (seconds)
– Forces an extension of the mask condition when the
input transitions from Masked to Unmasked
Attend Professional-Intruder class for more
information around this topic
378
Alarm Outputs
Select the correct Alarm Panel
Name the output
Output number corresponds to the panel output
379
HELP: System Administration > Access Control > Alarm Panels > Alarm Outputs
Alarm Outputs
Pulse duration
– By default outputs will pulse for 5 seconds
Output Activated or Deactivated by default
Timezone activation
– Output tracks the Timezone interval(s)
380
HELP: System Administration > Access Control > Alarm Panels > Alarm Outputs
Input/Output Local Linkage
An input may be linked to an output
– The link may be one to one or one to many
– Output follows the status of the Input
– Checkmark the appropriate Alarm Output(s) to be associated
with the Alarm Input
381
HELP: System Administration > Access Control > Alarm Panels > Input/Output Local Linkage
Controlling Alarm Panels in Alarm Monitoring
To interact with a desired device, right click on
that device
– Alarms may be masked or unmasked
– Outputs may be activated, deactivated, or pulsed
Commands activated by left mouse button
382
Firmware Versions
Firmware Version
– Review http://partner.lenel.com for current
Firmware compatibility charts
– recommended
383
Alarm Panels and Alarm Monitoring
Test the following items using the hardware:
– Activate Input 1
• Notice Alarm(s) generated in Alarm Monitoring
• Notice outputs (relays) activated/deactivated from local
linkage
– Mask Input 1 by right clicking on the input
• Activate the input to see the results of masking
– No Alarm and no relays activated
– Right click to Unmask the input
– Pulse output 1 by right clicking on the output
– Right click on the parent device to Mask/UnMask
Input(s) or Pulse Output(s)
– Right click on Input or Output and select Trace
• View results of Historical and/or Live trace of the device
384
OnGuard-Core
CONFIGURATION OF
CARD (BADGE) FORMAT
385
Card Format
OnGuard supports configuration of the following
card types
– Wiegand
– Smart Card
– Magnetic
Card Formats can be used to encode badges
– Magnetic and Smart formats
Card Formats are assigned to reader ports on
RIMs
– Magnetic and Wiegand formats
– Eight card formats per system
386
HELP: System Administration > Administration > Card Format
Card Format
Card formats can include
– Facility Code
• Identifies a particular site
• Up to 9 digits
– Badge ID
• Identifies the badge
• Up to 18 digits
– Issue Code
• Tracks reissues of the same badge ID number
• Up to 2 digits
• Not used for Proximity (Wiegand) badges
387
Wiegand Card Format
Wiegand-based Proximity badges and readers
communicate via the 125 kHz frequency
26 bit is standard Wiegand card format
– Other bit structures such as 64 and 72 bit
Proximity cards support only facility code and
badge ID
Data transmitted in binary (0/1)
Wiegand card formats are used for decoding only
– At the card reader
01100100
388
Wiegand Card Format
Wiegand card example – 26-bit format
Even Parity Data Stream Data Stream Odd Parity
10001000010010010000000000
Sum of 1s = 3 Sum of 1s = 1
Parity digit = 1 Parity digit = 0
389
Data Checking – (Standard 26 bit)
Parity checking is used to ensure data integrity
– The data stream is separated into two parts
A leading parity bit is added at the beginning of
the data
– If the sum of the 1s is an even number, the parity bit is set to 0
– If the sum of the 1s is an odd number, the parity bit is set to 1
A trailing parity bit is added at the end of the data
– The same process is performed on the back half of the data
stream, except the sum of the 1s is checked to see whether it
is an odd number
390
Wiegand Card Format
Name
Type
– Wiegand
Facility code
– Must be the same
number of digits set
in the field length
Reversed bits
– LNL-2210, LNL-2220, LNL-3300 and LNL-4420 ISCs only
391
HELP: System Administration > Administration > Card Format (Wiegand Format) > Card Format
Wiegand Card Format (cont.)
Badge Offset
– Post read re-processing of Badge ID
– Used to generate unique Badge ID from otherwise duplicated
physical Badges
– See next slides:

• Badge Offset – Add
• Badge Offset - Multiply
392
Card Format Badge Offset - Add
Add Offset to Badge ID when presented for a
specified Facility code
– Example: 100,000
+ 1,234
• Offset is 100,000
101,234
• Badge ID is 1234 (Facility code is 456)
• Resulting Badge ID reported as 101,234
Allows for duplicate Badge IDs on physical
badges providing they have different facility codes
8 Card Formats supported
1 Facility Code per Card Format is supported
– Specified Facility Code is used to trigger arithmetic
393
Card Format Badge Offset - Multiply
Multiply Offset with Facility Code then add
Badge ID to make new Badge ID for the
specified bit length 100,000 45,600,000
– Example: x 456 + 1,234
• Offset is 100,000 45,600,000 45,601,234
• Badge ID is 1234, Facility code is 456
• Resulting Badge ID reported as 45,601,234
Allows for duplicate Badge IDs on physical
badges providing they have different
facility codes
One card format used for each bit length
– Each Card Format can support many
Facility Codes
– Bit length is used to trigger arithmetic
394
HELP: Used to support sites with more than 8 facility codes in use within the badge population
Card Format Badge Offset - Multiply
Requirements
– Supported firmware
• LNL-2210, LNL-2220, LNL-3300, LNL-4420 with firmware revision
1.188 or later
– Readers must not be set for Facility Code Only online or offline
mode
• Facility code configured in the card format is NOT validated on
any card used when processing the card format
– Reader will always grant access
– Make the badge offset value larger that the highest badge ID in
order to help prevent duplicate calculated badge ID’s
• Calculated badge ID result must be 18 digits or less
• Badge offset has a 9 digit maximum length limit
– When using this feature, do not use other same length card
formats assigned to the same reader
395
Wiegand Card Format
Total number of bits
on card
Facility code, Card
number and Issue code
– Starting bit
• Set to 1 for 2nd bit starting
position
• Set to 0 for 1st bit starting
position (non-standard)
– Number of bits
Even and odd parity bits
396
Smart Card Format
Smart cards communicate with the readers via the
13.56 MHz frequency
Communication between the smart card and the
reader is encrypted
OnGuard supports the following types of smart
cards
– MIFARE
– iCLASS
– DESFire
397
Smart Card Format
All smart card formats use a Wiegand format (64
bit, 72 bit) to communicate back to the Access
Panel
A smart card format is not assigned to a wired
reader
Smart cards can be programmed for use with
Access Control, Biometrics, access to public
transportation, or other custom applications
Smart cards are discussed in more detail in the
Expert-Access (Biometrics) class
398
Magnetic Card Format
Card formats are dictated by the International
Organization for Standardization (ISO) number
7811
– Track 1 read only Track 1
Track 2
• 7 bit - 76 Char Max
Track 3
– Alphanumeric
– Write once
– Track 2 read only
– Numeric
– Write once
– Track 3 read/write/rewrite
– Numeric
– Read/write
399
Data Checking
Start sentinel – sent at the beginning of the data
stream
End sentinel – sent at the end of the data stream
Check digit – A single character generated by the
encoder and sent at the end of the data stream to
insure data integrity
Start Facility Badge Issue End Check
Sentinel Code ID Code Sentinel Digit
B12312345601F8
400
Access control track
– Configures the track on
which the access control
fields should be encoded
Total characters on
track
– Card check by checking
number of characters on
track
– Minimum allows greater
than or equal to quantity
selected
401
HELP: System Administration > Administration > Card Format (Magnetic Format) > Card Format
Field length
– Fields may be omitted by
setting order to zero
Field order and offset
– Used primarily for custom
encoding in applications
outside access control
Custom Encoding
– Allows configuration of
custom fields for all three
tracks
• All selected tracks must be
supported by the encoder
402
HELP: System Administration > Administration > Card Format (Magnetic Format) > Card Format
Custom Encoding
– Magnetic format only
– Allows configuration of
custom fields for all three
tracks
• All selected tracks must be
supported by the encoder
and card readers
– Allows custom formatting of
database fields
403
HELP: System Administration > Administration > Card Format (Magnetic Format) > Custom Encoding
Asset Management in OnGuard
Asset Card Formats
– An Asset Card Format is any different format
compared with Access Control Card formats
• Identified by check/tick in Card Format form
– The Badge-ID for an Asset (called a Scan-ID) is
assigned to physical articles
• Keys, equipment, vehicles, tools, paperwork etc.
– OnGuard can track who has which Asset at any time
by presenting Asset tags and badges to readers
– OnGuard can prevent Access Granted unless an
appropriate Asset is presented with the badge
404
Card (Badge) Formats
OnGuard 7.3 and older supported:
– Fixed at 8 Access Control card formats
• Per segment if system is Segmented
– And 8 Asset Management card formats
OnGuard 7.4 supports
– Above by default or
– Up to 16 Access Control card formats with no Asset
formats
– Adjusted in System Options > Hardware Settings or
if segmented under Segmentation
405
OnGuard-Core
CONFIGURATION OF:
READERS (INCLUDING RIM)
406
Reader Configuration
Adding and RIM and Door Settings
– The name of the reader
• 96 characters, first 32 appear on LNL-CK
Select
– Access Panel, Interface Type, Reader data Output
protocol, Port, Address (RS485 or IP) and Reader
number (0 or 1) in most cases
407
HELP: System Administration > Access Control > Readers > General
Panel, select correct panel Type and Output
format from drop-down lists
Type
Output
In earlier versions of OnGuard these are

combined in one long selection list
408
Port and Address
– RS-485 downstream port from the ISC
– Device address of the Reader Interface Module
• 0-31
– If LNL-1300e select IP address
If LNL-1320, LNL-2220 or LNL-4420

– Select reader number ‘0’ is reader first port, ‘1’ is
reader second reader port
409
Port and Address
– RS-485 downstream port from the ISC
– Device address of the Reader Interface Module (0-31)
Reader Number
– The number is automatically selected
– The number is determined by Reader Type selection
Alternate Reader
– Alternate reader associated with primary reader
– Two readers on the same side of the door
– Must select Primary Reader
410
Reader modes for online operation
– Locked
– Unlocked
– Facility Code
– Card Only
– PIN or Card
– Card and PIN
411
Reader modes for offline operation
– Locked
– Unlocked
– Facility Code
Selecting any other choice sets the offline mode to
LOCKED
A reader is considered offline when:
– Communication is lost to the Access Panel but the
reader still has power
– This is sometimes also called “degraded” mode
412
Held Open Time / Extended Open
– Controls amount of time the door may remain open on a valid
access grant or REX
Strike Time / Extended Strike
– Controls how long the strike will remain energized on a valid
access grant or REX
– Extended times are configured by using the “Use Extended
Strike/Held Times” option of the cardholder badge form
413
Strike
– Option is to cut off on open or on close of door contact
Do Not Activate Strike on REX
– Starts exit timing without releasing lock
Keypad
– Options include 4 bit, 8 bit, 1-7 style, or LNL-2020 Magnetic
Stripe Reader with or without tamper
– OSDP supports PIN by default, no selection required
414
Card Format
– OnGuard supports eight card formats per system
– At least one must be selected for the appropriate card
format(s) for card reader
415
When configuring reader 2 it will populate the
‘Paired Reader’ for reader 1
– Can be updated for another unassigned Reader 2 at
a different downstream address on the same ISC
416
Select fields on multiple readers may be
configured simultaneously
– Note: Be sure readers selected when using multiple selection
share similar configuration
– All editable values will be applied to all selected readers
417
Reader Settings
Door forced and door held open alarms may be
masked during a timezone or masked by default
– blank = never
Logging events to database can be restricted to
Timezone intervals if required
– blank = always
418
HELP: System Administration > Access Control > Readers > Settings
Reader Settings
Paired Master and Paired Slave
setting
– For controlling the same door using LNL-
1320, LNL-2220 or LNL-4420
Two Card Control
– Requires two different valid cards with
access permission within 10 seconds
419
OnGuard Duress Function
Reader must be in Card and PIN mode
The Duress code is the cardholders
PIN # + 1
– Add 1 to the last digit of the PIN
– If the PIN is 1234, then the duress code is 1235
– If the PIN is 1239, then the duress code is 1230
The Duress alarm will be sent to
Alarm Monitoring
Access to the reader may be denied
as an option set per reader
420
Reader Settings – Assume and Use Limit
Assume door used
– Used when door contact hardware is not
installed
Use Limit
– Access will be denied when the use limit is
reached at the reader
– The use limit value is set per badge
• The use limit is stored in the database
• Use limit range is 0-255 with blank = Unlimited
• Remaining uses will be restored upon a
database download to the ISC
• Changes to the use limit count will take effect
immediately
421
Reader Settings - Double Card
Double Card Unlock/Toggle allow alternate
unlocking/securing an Access Series reader
– Feature enabled on the LNL-2210, LNL-2220,
LNL-3300, LNL-4420 Access Panels
Second time attempt must be performed within 5
seconds at the reader
– Same badge ID two times with proper access
and Double Card Unlock/Toggle authority
enabled
• DPS (opening of door) has no bearing on the
feature
If no action is taken to re-secure the reader, the
system will automatically reset after 24 hours
(default)
422
Reader Settings - Double Card
While reader is unlocked with Double card unlock/toggle
requests, system generated reader mode changes are
ignored
Direct requests from an Alarm Monitoring user are not
ignored
When card is used to revoke unlock/toggle mode reader/door
moves to the mode it would have been in had it not been in
unlock/toggle mode, example:
– Reader is in CARD only mode
– Reader goes to Unlocked via unlock/toggle request
– Timezone/Reader Mode asks reader for PIN + CARD mode
• This will not be implemented
– Unlock/toggle is revoked by time passing or badge
– Reader moves to PIN + CARD mode
• The mode it would have been in due to earlier request
423
Reader Settings – Inverted Strike
Provides a reversal of the operation of
the strike relay for “Fail Safe” door
requirement
– The relay is activated in a standby state,
and deactivated upon an “open door”
command state
– Suitable for fail-safe locks
424
Reader Settings - Turnstile/Tailgate
Turnstile
– Each access granted activates the strike for 1
second regardless of strike time
– Can not be used with master and slave
settings
– Designed for use with turnstile models that
buffer access granted
Tailgate
– On access Aux Output 1 pulses for one
second
– Used with optical turnstile hardware with
tailgate support to help detect tailgating
cardholders
425
Reader Settings - Alarm Shunt
Utilizes auxiliary output 1 relay to
interrupt or bypass a door contact
connected to a secondary
intrusion/alarm
– Operates while door is legitimately open
– Supported by LNL-1300 Series 2, LNL-
1300e, LNL-1320 Series 2, LNL-2210,
LNL-2220, LNL-4420
Mutually exclusive with other uses of
Output 1
– One LNL-1320 only output 2 used if
output 1 already utilized
426
Alarm Shunt Behavior
Access cycle initiated
– Valid credential, open door command, REX etc.
Auxiliary output 1 will activate 5 ms prior to the
strike output
Strike relay deactivates at the end of the strike
time
– Note: It may also deactivate when the door opens based on the
reader configuration
Aux. output 1 relay deactivates 1 second after the
door is closed if it is within the held open time
– IMPORTANT: This will also deactivate the shunt (relay) after the
held open time expires if the door remains open
– This could cause an alarm in the intrusion system
427
Alarm Shunt Behavior
Door used
NOT TO SCALE
Door not used

NOT TO SCALE
428
Alarm Shunt – Special Caution
Special note on Alarm Shunt feature
– Certain configurations in Intrusion systems may use
the “shunted” contact as a trigger for the intrusion
panel entry delay and disarming
– Examine the intrusion panel configuration prior to
enabling the OnGuard Alarm Shunt feature
– Other functions that utilize the reader interface
module auxiliary output 1 will need to be deactivated
• Tailgate
• Special 2-man rule
429
Alarm Shunt
Interaction between Alarm
Shunt and Pre-Alarm
enforcement improved
– Alarm Shunt and Pre-Alarm
functionality cannot both use Aux
1 relay simultaneously
• Pre-alarm now able to use the Aux 2
relay on the LNL-1320 reader
interface board when Aux 1 relay is in
use
• No pulse relay option will be
available in the drop down list when
using LNL-1300 and LNL-2220 IDRC
430
Strike Follower
A strike follower cannot be configured with
a tailgate/pre-alarm because both use
auxiliary output 1
– Similar to the alarm shunt feature
Note: When strike follower is configured, aux output 1 cannot be

activated or pulsed in Alarm Monitoring or used for local I/O or global I/O
431
Strike Follower
Activation of the auxiliary 1 output
when the strike relay activates
– Useful for automatically opening a door
– Under the Auxiliary Outputs tab, configure either
• The auxiliary output 1 to follow the strike pulse, with
an option delay
• The auxiliary output 1 to pulse with the strike, with
an option delay
– This feature is ONLY supported with
• LNL-2210 , LNL-2220, LNL-3300, LNL-4420
• LNL-1320, LNL-1300 Series 2, LNL-1300e
432
Denied (PIN) Attempts
Denied attempts events include
– An unknown PIN entry at a reader in PIN or Card
mode
– An invalid PIN entry at a reader in Card and PIN
mode
– An invalid cipher entry at a reader in Cipher
mode (covered in Professional-Access class)
If configured, the reader will lock for a
configurable period of time if the
denied attempts count is exceeded
433
Count
– The number of invalid PIN access attempts
(while in Card and PIN reader mode)
• 0-255, zero disables the counter
• Produces ‘PIN Count Exceeded’ alarm
Timeout
– The time that must pass before the PIN attempt
for a Badge becomes the first attempt again
• 1-999 minutes
Restore
– When the maximum PIN attempts count is
reached
• 0 – do nothing
• 1-999 lock the reader/door for the duration selected in
minutes
434
The reader mode in the status tree will not
change while in denied attempt lockout mode
– A Reader Locked event will be generated while in denied
locked mode
435
Reader Settings
Pre-Alarm
– Used for pre-held alarm annunciation
• None: gives no warning before a Held Open
Alarm is generated
• Pulse AUX Output 1: pulses the reader AUX
Output 1 for the specified Output 1 Pulse Time
• Use Reader Buzzer: Activates the buzzer on
the reader if wired
• The duration is specified in the Pre-Alarm
timeout field
– Timeout specifies when the buzzer or AUX 1
pulse will start
– The buzzer will continue until the door is
secure
– Reader must support the buzzer control
436
Reader Settings
LED Mode
– Software configurable control of the reader
LEDs
• Single-wire control of the red/green LED
• Dual-wire control of the red/green LED
• Dual-wire control of the red/yellow/green LED
– OSDP mode:
• Without LCD display
• With LCD display
437
Reader Controls
Door Contact and REX Supervision settings
– Report REX events
• Controls whether or not REX events are displayed in Alarm
Monitoring
438
HELP: System Administration > Access Control > Readers > Controls
Relaxed Door Forced Open Detection
Relaxed door forced open detection provides a
two second restore delay once the door contact
secures after a valid door access cycle
– Access grant
– REX
– Open door command issued
Also resets the held open alarm for each re-cycle
of the door contact
439
HELP: System Administration > Access Control > Readers > Controls
Reader Inputs and Outputs
Auxiliary Inputs and Outputs
– They are created with readers based on the RIM
– They are configured the same way as Alarm panel inputs
– They will be online and ready as soon as the reader is
configured
– Can be renamed
– Supervision of Inputs can be configured
– Pulse time for Outputs can be configured
440
Reader Groups
Reader grouping is useful for finding readers /
doors / locks based on a specific search criteria
List Builder is used to populate the Reader
Groups with dropdown choices
– Located at Administration > List Builder
441
HELP: System Administration > Access Control > Readers > Grouping & System Administration > Administration > List Builder
List Builder
Allows content to be added or
deleted from select lists
– Reader group lists
– System lists such as:
• Badge status
– Found on Cardholder’s Badge tab
• Two man type
– Cardholder lists such as:
• Department, Division, Building, etc.
– Validate Lists ensures cardholder and system
lists contain valid data content when that data
is imported from other applications
442
HELP: System Administration > Administration > List Builder
Reader Groups
Searches may include one or many groups
Saving searches
– Searches may be Saved / Deleted / Recalled
Once a search is performed the filter may be
cleared by clicking on Show All
– All Readers will be displayed
443
HELP: System Administration > Access Control > Readers > Grouping
Reader Groups
Reader Group labels may be renamed using
FormsDesigner Lite (covered later in this class)
444
HELP: FormsDesigner
Readers and Alarm Monitoring
Icons in System Status Tree
– Door Forced Open
– Door Held Open
– Cabinet Tamper
Reader Status information is located next to each
reader
445
Aux Inputs/Outputs Icons
Reader AUX Inputs/Outputs are
displayed as separate icons
– Reader AUX input and output
devices display with the same
icons as alarm input and output
devices
– Reader auxiliary input and output
devices are displayed in the Alarm
Monitoring System Status window
and the System Administration
System Tree
446
Firmware Versions
System Status Window can be set to display
firmware for Reader Panels under Options >
Display Device Firmware Revisions
LNL-1300 Firmware
– LNL-1300 Series 1 Firmware Download not supported
– Replace device if latest Firmware functionality is required
– Existing field boards need to be replaced for full functionality
Review http://partner.lenel.com for current

Firmware version is not reported for
Honeywell panels
447
Firmware Versions
Firmware Version
– Review http://partner.lenel.com for current
– recommended
448
Control Hardware
Control the following via right-clicking on a
reader in Alarm Monitoring System Status tree or
event
– View Reader Notes
– Open Door(s)
– Reader Access Modes
– Activate/Deactivate/Pulse Reader Auxiliary Outputs
– Mask/Unmask Door Forced Open or Reader Auxiliary Inputs
– Perform a Trace by right clicking on the device
449
OnGuard-Core
ALARM ACKNOWLEDGEMENT
450
Alarm Acknowledgment
Double click on any alarm
in the Main Alarm
Monitoring Window
Displays information
regarding an alarm
Alarms can be printed to
the default printer
Previous/Next allows
multiple alarms to be
handled in the same
acknowledgement session
Notes may be associated
with alarm
– Acknowledgment notes may be
selected from a configured list
451
In Progress Alarms
Alarms can be marked as In Progress through
either
– The Alarm Acknowledgment window
– From the Fast / Group Acknowledge toolbar icon
An ‘in progress’ icon (checkmark) appears next to
the alarm/event
– The date, time, and user is logged at the time that the alarm is
marked in progress
Alarm can be acknowledged at a later time
452
Elapsed time
– Displays the elapsed amount of time between when the event
was generated and when it was responded to
Update button
– Used to update addition acknowledgement notes into the
database
453
Alarms may now be acknowledged from multiple
Alarm Monitoring locations
– Main Alarm Monitoring window
– Pending Alarms window
– Trace Monitor window
454
Fast/Group Acknowledgment
Fast/Group Acknowledgment of alarms
– Multiple selection of alarms
• Range – click the first alarm then use the shift key to select
range
• Individually – Using the control (Ctrl) key
• Ctrl key + F12 keyboard shortcut
– Ctrl key + F11 (Select All)
455
Pending Alarm Window
Displays all pending alarms
– All active alarms not yet deleted, restored, or acknowledged
There is no filtering capability
456
OnGuard-Core
INTRODUCTION TO
MONITORING ZONES
457
Monitor Zones
Monitor Zones are used to allow for filtering of
hardware and events/alarms in Alarm
Monitoring
– Monitor Zones can contain all hardware from an Access
Panel or specify individual hardware components such as
the Front door reader or specific motion detectors (inputs)
– Timezones give added control to configure which events
during what timeframe
Default Monitor Zone exists automatically
– Can contain all hardware
Unlimited quantity of Monitor Zones can be
created
Monitor Zones can be assigned to a
workstation and/or to an OnGuard User
458
HELP: System Administration > Alarms > Monitor Zone
Monitoring Zones
User – filtered hardware & events by time
Workstation Monitor Zone

Default
Selected
Hardware Event Routing Group
User Events Timeszones
Permission Default Map
459
HELP: System Administration > Alarms > Monitor Zones
Event Routing Group
Creation of an Event Routing group assigns:
– An event or events to the group
– A timezone that the event will be displayed in Alarm Monitoring
• Events may have different timezones assigned
Creating an Event Routing group is optional
– The default Event Routing group, None (All Events Always), can
be used
460
Monitor Zone
Creation of a monitor zone includes:
– A default map – this is optional
– Access Panel(s) to receive events and alarms from
– When selecting an Access Panel the options are to
• Include all child devices
• Specify child devices individually
– An event routing group
• Default event routing is NONE (All Events Always)
461
Monitor Station
A Monitor Zone may be assigned as
recommended to a workstation running alarm
monitoring
– Will not prevent a User from selecting another
462
Zone > Monitor Stations
Monitor Station Event Queue
Queue events when
logged out
– LS Communication
Server continues to send
events to the database
– Events are stored in a
queue until the Monitor
Station logs in
• There is a separate
queue for each Monitor
Station
– The limit for the number of
days is set in General
System Options
463
Monitor Zone User Assignment
A Monitor Zone may be assigned to an OnGuard
User
A User assignment overrides a workstation
assignment and selecting another is not possible
464
HELP: System Administration > Administration > Users > Monitor Zone Assignments
Monitor Zone Assignment
When logging on to Alarm Monitoring the
following options are available
– Save as monitoring station assignment
• The selection is stored on the Monitor Station Tab
– Save as user assignment
• The selection is stored under Monitor Zone Assignment in Users
465
Monitor Zone Assignment
Any new Access Panels that are
added to the system can be
assigned to a monitor zone(s)
– User will be prompted to assign the
Access Panel to a monitor zone
• The user has the option not to add the
Access Panel to any monitor zones by
pressing Cancel
• An Access Panel can belong to multiple
monitor zones
The system may also be
configured so that new Access
Panels are added to all monitor
zones (System Options)
466
Using Monitor Zones
Main Alarm window has a default 10,000 event limit
– Monitoring will stop receiving events (Suspend) and
issue an warning message
– Creating appropriate Monitor Zones and Event Routing
Groups will help to prevent this issue
467
Automatic FIFO Alarm Management
Optionally clears alarms automatically
– Only alarms that do not require user action are cleared
Configurable between 1,000 and 25,000 alarms for
optimal performance
Automatically prompts user if not enabled and
Maximum Alarms Range is reached
468
OnGuard-Core
ACCESS LEVELS AND

ACCESS GROUPS
469
Access Levels
Access Levels are used to control
cardholder access
Access Levels are assigned to
Cardholders
An Access Level may span across
multiple Access Panels
470
HELP: System Administration > Access Control > Access Levels
Access Levels
Access levels are a combination of
readers and timezones
– Multiple readers may be assigned to an access level
– Individual readers may use different timezones
Default quantity of Access Levels that
can be created is 255
– System Options > Hardware Settings tab
– Maximum is up to 31,999
– Uses shared memory space on panel
Default quantity of Access Levels that
can be assigned to a cardholder is 6
– System Options > Hardware Settings tab
– Maximum is 128 by default, can be extended to 255,
see following….
471
Maximum Access Levels per badge
OnGuard 7.4 can allow up to 255 access levels
per badge
– By default 6 per badge can be raised from 6 to 128
in System Administration > System Options >
Hardware Settings
– To raise above 128 first ‘Enable extended cardholder
storage’ in System Administration > System Options
> Hardware Settings
• This action will reduce the number badges the ISC can hold
except for LNL-4420 where memory access is expanded
472
HELP: System Administration > System Options > Hardware Settings tab
Access Levels
Add an Access Level provide unique name
Checkmark appropriate Reader(s) and Timezone(s)
Click on Assign button
Click OK to save
473
HELP: System Administration > Access Control > Access Levels > Access
Access Levels Toggle Command
Enable Access Level to authorize badge(s)
for Double Card Unlock/Toggle
Authorization
Setting in the “User Commands” tab
474
HELP: System Administration > Access Control > Access Levels > User Commands
Access Levels
Show Similar Access Levels
– This will locate access levels with similar reader assignments to
assist with duplication prevention
– Readers may be filtered for search exclusion using check
marks on readers listed
• The reader list must be refreshed after changes
– Access Levels may be filtered out by using the Exclude Levels
button
475
Access Levels
476
Access Groups
An Access Group is a collection of Access Levels
– Up the maximum configured under Hardware Settings tab (per
cardholder)
A default Access Group may be assigned to a
badge type to allow for automatic assignment of
access levels to a cardholder
A group may also be used in assigning multiple
access levels to badge
– Access Levels are assigned to the cardholder not the Access
Group
Unlimited Access Groups can be created
– Creating Access Groups is optional
477
HELP: System Administration > Access Control > Access Levels > Access Groups
OnGuard-Core
CARDHOLDER
CONFIGURATION
478
Cardholder Options Configurations
Cardholder Options
– Quantity of active badges per cardholder
– PIN Generation
– Use or Lose Badge feature
– Badge ID Allocation
List Builder is used to add
– Badge Statuses
– Cardholder form drop down lists:
• Title
• Department
• Division
– etc.
479
Cardholder Options – General Tab
Options affecting all cardholders are defined here
Multiple active badges
– Sets the maximum number of active badges that can be
assigned to a cardholder
– 1-9,999 active badges per cardholder
– Default = 1
480
HELP: System Administration > Administration > Cardholder Options
Badge PIN Code Generation options
– The length of the PIN
• 4, 6, or 9 digits
• 4 is the Default value
• If the PIN number is less than these values, the # key must be
pressed on the reader keypad to signal the end of the PIN
• Affects Access Panel memory
– Select PIN generation method
• None (Manual Entry) or Random
• None (Manual Entry) is the default value
• PIN number is hidden by asterisks on the badge form
• If Random is selected, the PIN number is viewable only the first
time when the badge is added
481
Badge PIN Code Generation options
– Enabling Unique PIN code prevents duplicate PINs in the
database
– Allow Edit of PIN code
– Copy PIN code checkbox will prompt user to copy PIN to next
badge when adding a new badge to a cardholder
482
Use or Lose Badge Settings
– If the badge is not used for a configured number of consecutive
days, the badge will deactivate and be set to the badge status
specified
• May also be set per Badge Type
• The lowest number of days takes precedence
– The default setting of 0 disables the feature
– Additional badge statuses may be added through List Builder
• Any badge status other than ‘Active’ is a deactivated badge
status
483
Badge Status Deactivation on Expiry
Configuration that will automatically change the
badge status when the badge exceeds its
deactivation date
– Feature will work only for added badges after this configuration is
completed. Does not affect existing badges in the database
The badge deactivate status may be configured:
– System Badge Status setting
• Configured on the General Cardholder Options tab
– Badge Type setting
• Configured on the Badge Type - Deactivation Settings tab
484
Badge Status Deactivation
Feature is disabled if the configuration dropdown
is left blank
The badge status updates occurs 24 to 48 hours
after expiration to account for differences in
world time zones
If the badge type setting is configured, it will
override the system setting
The badge is removed from the panel once the
status is changed from active
Requirements
– The Linkage Server must be configured and running
485
Thumbnail photo
– Generates an additional photo in the database for each
cardholder
– This enables faster searching
Precision Access Mode
– When access to many individual doors needs to be
assigned to badges and that need would create too
many access levels
• For example airports, where each jet way is treated as a door,
with unique access assignments for individuals
• Access Panels support inclusion only
• Must be configured in three areas of OnGuard
– Cardholder Options, Access Panel, per Cardholder
486
Badge activation/deactivation dates
– By default, badges activate and deactivate at Midnight
– The Use time option adds time control on the Badge Tab under
the Cardholder
– Badge deactivation date information is stored in the database,
not the access panel by default (can be changed per Access
Panel under Options tab)
487
Temporary Access Levels
– Granularity value determines the frequency the
access panels are updated
• The range is from 5 to 60 minutes, with a 30 minute default
– LS Communications Server examines and updates
temporary access levels based on the Granularity
setting
• Date/time stored in the database not on the hardware
– Reducing the default of 30 minutes may impact
system performance
488
Allow Duplicate Access Levels
(Different name but same Reader/Timezone combinations)
– Checked = Allows duplicate access level content
– Unchecked = Prevents duplication of access level content
– Default is to allow duplicate access levels to be created for
legacy purposes
• User will see a prompt to continue if a duplicate access level exists
Allow empty access levels

(Has name but no Readers/Timezones)
– Restricts creating an access level without reader assignments
– Default is to allow empty access levels to be created
489
Cardholder Options - Badge ID Allocation
Badge ID generation options
– Automatic – the next sequential number (Default selection)
– From ‘Cardholder ID’ – uses the cardholder ID field (or custom
defined field) value
– Internal Cardholder ID – uses a system generated value (EMP
ID), which is an internal database ID
– Manual Entry – operator manual entry
FASC-N – Federal Agency Smart Credential
Number (US Government issued badges)
490
HELP: System Administration > Administration > Cardholder Options > Badge ID Allocation
Issue Code
– First issue code – the number used as starting point for first
issue of badge
– Auto-increment issue code – automatically assigns the next
sequential number on re-issue of same badge
• Zero (0) is the default and can be changed
• Automatically selected for the following choices
– From ‘Cardholder ID’
– Internal Cardholder ID
491
ID Ranges (optional)
– Allows for specified fixed ranges of badge IDs to be used
• Restricts Badge ID field under the cardholder to conform to this
range of values
• Unique ranges can also be specified by badge type
• Reduces input error
492
Possible Warnings and Notifications
Unique PIN Enabled Create/Save Photo Thumbnails
Use Time Log out and on
493
OnGuard-Core
BADGE DESIGNER
494
Badge Designer
Badge Designer program allows
users to create Badge Layouts that
can be associated with badge types
in OnGuard
Various badge layouts can be
created for different purposes
– Visitors
– Employees
– Contractors
Printed badge will mimic the badge
layout design (WYSIWYG)
495
HELP: Badge Designer
Badge Designer
Steps to Create a Badge Layout
– Start a new badge layout (Layout > New)
– Define the layout properties (View > Layout
Properties)
– Place objects on the layout (Edit > Insert)
– Customize the objects (Object Properties)
– Save the layout (Layout > Save)
496
HELP: Badge Designer
OnGuard-Core
BADGE TYPES
497
Badge Types
A Badge Type must be assigned to a
cardholder when a badge ID is going
to be added to that cardholder
Unlimited number of Badge Types
can be created
A Badge Type is simply a mechanism
to assign key features to a
Cardholder’s Badge
– Card Format (for Smart or Magnetic encoding)
– Deactivation Date
– Badge Layout
– Default Access Group (Access Levels)
498
HELP: System Administration > Administration > Badge Types
Badge Types
A Badge Type also allows
for specific configurations
for: Badge
– Printing and Encoding needs Card Design
– Use or Lose feature and Badge Format
Deactivation for a specific group
of badgeholders as needed Access
• Contractor or Visitors for Levels
example
– Management of Required Fields
and any Missing field data on the
Cardholder record
Badge Type
499
Badge Types
Classes of Badge Types
– Standard
• Employee – permanent badge
– Temporary
• Temporary badge - Transferrable
– Visitor
• Non-disposable – may have access level assignments
• Disposable – cannot have access level assignments
• Transferrable
• Only Badge Type which can be assigned to a visitor when
using OnGuard’s Visitor Management
– Special Purpose
• These badges are used with ILS wireless readers only
500
Badge Types
Badges may be automatically moved only
for Visitor and Temporary badge classes
– Allows for reuse of badges for different
visitors and contractors
If using the Standard badge type, the Badge
ID must be deleted in order to reuse that
particular Badge ID number
– This is not a recommended process
501
Badge Types
Create a Badge Type
Name and Choose Class type
Default deactivation date of
badge (Choose one)
– After: Deactivates based on
pre-defined period from
activation date
– On: a specific date
– No default
• User must enter date manually on
the Badge tab under the
Cardholder
502
Badge Types
System setting enables
the use of time in
addition to date for
activation and
deactivation
– Access panel configuration
allows storing date only or
date and time
– Specify time of expiration
per Badge Type
– Default it 12:00AM
503
Badge Types
Override with date of
existing badges
– This setting will use the
deactivation date of an
existing badge in the
system when another badge
of the same type is issued
to a cardholder
– This is useful for contractors
that are only onsite for a
specific amount of time
504
Badge Types
Default access
group
– This assigns default
access levels to the
badge
Front layout
Back layout
– Optional
505
Badge Types
Printing
– Duplex print mode
– The default Badge Type card
printer
– The Badge Type card printer
for this workstation
• Overrides the default badge
type card printer
– Enable Print limit to restrict
OnGuard Users from printing
multiple badges of this Badge
Type
• Works in conjunction with the
print duplicate badges
cardholder badge permission,
if enabled
506
HELP: System Administration > Administration > Badge Types > Printing
Badge Types
Encoding
– Assigns an
encoding format for
the badge
• Magnetic or Smart
Card formats may be
encoded
• The encoder may be
a standalone device
or inline device on a
card printer
507
HELP: System Administration > Administration > Badge Types > Encoding
Badge Types
Required Fields
– The addition of a badge
record will be denied if a
required field is blank
– Fields required may
change based on badge
type
– Useful when specific
database fields appear
on a badge
508
HELP: System Administration > Administration > Badge Types > Required Fields
Badge Types
Cardholder records can be searched per Badge
Type for required field data
– Update all record totals
• Displays a count of records not containing data in all fields
– Search up records missing required data
• Runs a cardholder search for all records not containing data in
required fields
– Search up records missing highlighted data
• Runs a cardholder search for all records not containing data in
highlighted fields
– Highlight all required fields
• Highlights all the fields selected as required
509
Badge Types
510
Badge Types
Badge ID Allocation
– Configures the Badge Type
to use the system setting for
ID allocation or a different
method
– Each Badge Type may be
configured with its own
badge ID settings
• Specific badge ID ranges
may be created and used,
which will override system
settings
511
HELP: System Administration > Administration > Badge Types > ID Allocation
Badge Types
Use or Lose Badge Type
Settings
– The use or Lose feature is
configurable per Badge
Type
• The number of days
• New badge status on
deactivation
Badge Deactivation
Status
• Badges are changed to this
status when deactivated by
date
512
HELP: System Administration > Administration > Badge Types > Deactivation Settings
Badge Types
Processing Use or Lose Feature
– Badge will be deactivated based on the lower number
of days set for system setting or Badge Type
• Setting either the system setting or Badge Type setting to a
value of zero keeps it from being processed
– If the system setting is set to zero and the Badge Type is set to
a value, Use or Lose is not processed for any badges other
than those with that Badge Type
Processing Badge Deactivation Status
– If configured for Badge Type, this setting will override the system
default
513
HELP: System Administration > Administration > Badge Types > Deactivation Settings
OnGuard-Core
MANAGING CARDHOLDERS
AND THEIR BADGES
514
Cardholder Management
Access the Cardholder forms
from:
– System Administration
• Administration -> Cardholders
– Alarm Monitoring
• View -> Badge Info
– IDCredentialCenter
• Launch program
OnGuard Credentials module
Webpage also available
– Requires Subscription license
515
HELP: System Administration > Administration > Cardholders
Cardholder Data Input
Add a Cardholder
Standard text fields
– Required fields
• Last name is the only
required field
– Drop-down lists
• Values must be
populated with List
Builder
Initially adding a
cardholder, all tabs
Default layout and field names shown
are accessible
Top and right
sections of the
cardholder form are
ubiquitous on all tabs
516
Badge Type
Selecting a Badge Type can automate the badge
and access level assignment for new cardholder
– The Default Access Group from Badge Type is assigned to the
cardholder automatically
A cardholder record may be added by itself by
not selecting a Badge Type
A cardholder without a Badge Type assignment
will not be downloaded to an access panel
517
Cardholder – Badge Tab
Badge Type selection
Badge ID number
– Manual / Automatic
– Determined from Badge ID
Allocation Tab (Cardholder
options or specific Badge
Type)
Issue Code
Badge Status
– Any choice other than
‘Active’ will deactivate the Default layout and field names shown
badge
– Use List builder for
additional content
518
HELP: System Administration > Administration > Cardholders > Badge
Activation and Deactivation Dates for
badge
– Auto assigned based on Badge Type selected
– Can be manually changed
PIN Assignment
– Up to 4, 6, 9 digits
– Manual or Random
– Configured under Cardholder Options
Use limit
– Enforce use limit setting must be enabled at the
reader
– Access Panel monitors the use limit count set per
Cardholder
519
Embossed Number Correlation
– Also known as hot stamp
– Typically the same as the Badge ID
– Used for badge tracking
Extended strike/held times
– Uses reader extended strike and held open times
520
Adding Badges
Maximum active badge enforcement
– If the cardholder has the maximum number of badges allowed
(set under Cardholder Options), adding a new badge requires
an existing badge to be deactivated
Default deactivated badge status
– Lost or Returned
– Others may be added with List Builder
521
Adding Badges
Access level assignment of new badge
– Copy from existing badge
– Use the default access group for this Badge Type
– No access level assignment
Copy PIN optional
– Set under Cardholder Options
522
Cardholder – Access Level Tab
Access levels are assigned to a cardholder’s
badge via the Access Levels tab
Access Levels can be automatically assigned to
a badge if the Default Access Group was
configured in the Badge Type
523
HELP: System Administration > Administration > Cardholders > Access Levels
Cardholder – Access Level Tab
Access group assignment
– Assigns access levels in the group to a badge
Temporary access level assignment
– Sets the activation and deactivation dates for an access level
524
Temporary Access Levels
Assigns activation and
deactivation dates to the
access level
– These may include time if that
option has been configured
under Cardholder Options
• Always rounds down to the
nearest Granularity level
• i.e. Granularity set at 30 minutes
in Cardholder options:
time set to 4:10, time will revert
to 4:00
– LS Communications Server
manages and issues the update
to the access panel(s)
• In OnGuard 7.0 and earlier the LS
Linkage Server manages this
process
525
Double click on Access Level
Double click on any Access Level in the
Cardholder screen Access Level tab to view the
associated Readers and Timezones
526
Capture Dialog
Use the capture button to add or modify photos,
signatures, and biometric templates
– The capture source may be selected manually
– Processing profile may be selected manually for
enhancing the image
527
HELP: System Administration > Administration > Cardholders [Capture]
Capture Source
Capture source
– WDM Video displays Video
Settings sub-tab
– FlashPoint/MCI Video
displays Video Settings and
Video I/O Settings sub-tabs
– Scanner displays Scanner
Settings sub-tab
– Digital Camera displays
Digital Camera sub-tab
– File Import displays File I/O
Settings sub-tab
528
HELP: System Administration > Administration > Cardholders [Capture] > Photo
Capture Configuration
Capture Tabs
– Chromakey
setup
– Effects gallery
– General
settings
– Capture source
settings
– File I/O settings
529
HELP: System Administration > Administration > Cardholders [Capture] > Photo
Chromakey Tab
Chromakey is used to
remove the static
color from behind the
cardholder photo
image
Key to origin
– Resets the crosshair to the
upper left corner
Tolerance
– Controls how much color
removal occurs
530
HELP: System Administration > Administration > Cardholders [Capture] > Photo > Chromakey
Effects Gallery Tab
Standard imaging effects are incorporated in the
OnGuard product
Multiple effects may be pre-defined
Six effects are pre defined in the Gallery
Imaging effects may be combined to achieve
desired result
531
HELP: System Administration > Administration > Cardholders [Capture] > Photo > Effects Gallery [Process]
General Settings Tab
Show admin settings by default
Define the default video
capture source
Define the default processing
file
Adjust the amount of image
compression
Set the crop window attributes
532
HELP: System Administration > Administration > Cardholders [Capture] > Photo > General Settings
Photo Auto-crop
Automatically crop/rotate a
cardholder image for
uniformity of cardholder
photo images
Enabled by default
Available from any capture
dialog in OnGuard
The features may be
enabled/disabled per
workstation
Aspect Ratio can be
changed
533
Photo Auto-crop
Considerations for use
– Images must be at least 640x480 pixels in resolution
– Both cardholders eyes must be visible in the image
– The face may not be covered in the image
– The image includes the cardholders head and partial shoulder
area
– The cardholders head may not be too close to either side or
top/bottom of the image
– The cardholder may not be too small or large in the image
– The cardholders head may not be tilted more than ±17°
– The image may contain only one face
534
Photo Auto-crop
Eye Detection Crosshairs Crop Window
535
HELP: System Administration > Administration > Cardholders [Capture] > Phot > General Settings
Photo Rotation and Auto-crop
536
Signature Settings
Select Tablet Type
Pen Attributes
– Pen Pressure
Granularity controls the
amount of stylus tip
pressure needed to
begin writing
– Pen Width controls the
line width in pixels
Pen and
Background Color
537
HELP: System Administration > Administration > Cardholders [Capture] > Signature [Sign]
Cardholder Searches
Searching of existing records
– All cardholder fields are searchable
• PIN field on the Badge tab is not available
– Refine search by entering more detail in the available fields
– Search > OK results in all cardholders
– Boolean search methods are used
• Wildcard character % can be used in searching
– Access level searches include all, partial, none of the selected
538
HELP: System Administration > Administration > Cardholders > [Search]
Cardholder Search Permission
Adjusting a Cardholder User Permission can
prevent the OnGuard user from accessing the
Cardholder Search feature
– The cardholder form may be configured to automatically launch
in Alarm Monitoring displaying the cardholder record
– Limits the user to display only the current cardholder record
Prevents Alarm Monitoring user from performing a
record by record search
539
HELP: System Administration > Administration > Users > Cardholder Permission Groups
Printing Badges
Print preview or print may be selected
Single badge or multiple badges may be printed
for the same cardholder
Multiple badges may be printed based on
cardholder search
540
HELP: System Administration > Administration > Cardholders > [Print]
Encoding Badges
Select the badge and click the Encode button
541
HELP: System Administration > Administration > Cardholders > [Encode]
Cardholder Menu
Only available when the Cardholder
form is active
Viewable in System Administration
and Alarm Monitoring
– Keyboard Wedge Settings
– View Options
– Bulk Operations
– Show Last Granted Location or
Attempted Location
542
HELP: System Administration > Cardholders (with Cardholders already open)
Keyboard Wedge Settings
Cardholder Menu Selection
– Keyboard Wedge Settings
• Support for both non government cards and the Department
of Defense Common Access Card (CAC)
– Can be used to search cardholder via Badge ID by
simply typing in the badge ID number while at the
cardholder screen
543
HELP: System Administration > Cardholders (with Cardholders already open) > Keyboard Wedge Reader Settings
View Options
The View Options features allow the OnGuard
User to alter Cardholder photo and signature
view ability
– Can be set per workstation
Number of records to move when using the fast
forward or rewind buttons
544
HELP: System Administration > Cardholders (with Cardholders already open) > View Options
Bulk Operations
Bulk Operations allows
for mass changes of the
cardholders searched
– Access level assignments
• Add and Remove only
– Modify Badges
• Update Activate/Deactivate
Date
• Update Badge Status
• Update Use Limit
• Apply Badge Filters as
needed
545
HELP: System Administration > Cardholders (with Cardholders already open) > Bulk
Show Last Access
To change the access
activity results displayed
below the cardholder
photo simply choose
either Show Last Granted
Location or Show Last
Attempted Location
– Set up per workstation
– Default is Last Granted
Location
546
HELP: System Administration > Cardholders (with Cardholders already open) > Show Last Granted/Attempted Location
Testing Cardholder / Badge Functions
Test the following, observe the results
 Access Granted on  Pre-Alarm Door held
each reader open
 Granted No entry versus
 Relaxed Door Forced
Granted Access
 Duress PIN
Open
 With and without Access  With Series 2 hardware:
Denied checkbox selected  Alarm Shunt
 Assume Door Used  Strike Follower
 Double Card Unlock/Toggle
 Use Limit  Test with badges that do
 Set limit in cardholder form and do not have this
authority applied via their
 Two Card Control Access Levels
 Denied Attempts
 Invalid Badge
 Invalid Access Level
547
OnGuard-Core
FORMSDESIGNER LITE
548
FormsDesigner Lite Application
Used to:
– Modify field names on forms
– Modify the form layout
– Modify the Tab order
Changes made to field names on forms does not
update reports or List Builder names
The following forms can be modified:
– Cardholders
• Cardholder and Badge form
– Readers
• Group form
– Visit, Visitor, Asset
• Not covered on this class
549
HELP: Start > All Programs > OnGuard > System Tools > FormsDesigner
FormsDesigner Lite Application
Separate OnGuard application accessed via
– Start>All Programs>OnGuard>System Tools > FormsDesigner
Functionality controlled through the license
– FormsDesigner Lite
• Supplied with OnGuard
• Allows cosmetic changes
– FormsDesigner Full
• Requires an additional license
• Covered in detail in the PRO-Data class
550
Before Launching FormsDesigner
Ensure that the form being edited is not in use by
any OnGuard User when the revised form is
being saved
– Force operators off the system if necessary
• Disable User accounts
• Revoke license via License Administration
• Wait 1 minute
• Save the form
• Enable the User accounts
551
Before Launching FormsDesigner
You must backup your database
– You will be prompted to confirm you have done so
– Once saved modifications cannot be undone
– This protects against unforeseen problems such as
• Power Outage
• Network Problems
• Database Issues
552
FormsDesigner Navigation
Object List
All Viewing Permanent Area
Database
Info Window Custom Area
553
553
FormsDesigner Lite
Typical Cosmetic Changes
– Change field labels object text to match country
requirements, such as zip code, state, etc.
– Rename Reader groups to customer defined names
– Relocate fields on a page
– Change the tab order when adding cardholders
554
Label Object
Double click on the label to be updated
Update the label text to the appropriate value
Update Field Label here

Then press OK
555
Reader Groups
Reader Group names can changed
There are six default groups
available, more can be added with
FormDesigner Full
The names of the groups can be
changed in FormsDesigner Lite
556
Reader Groups (Cont.)
Changing the label of the reader groups is the
same as changing fields in the Cardholder pages
557
Reader Groups (Cont.)
This change will reflect on the Readers and doors
screen, but not in List Builder
558
HELP: System Administration > Access Control > Readers > Grouping & System Administration > Administration > List Builder
Field Location
Fields may be moved within the chosen screen
– Select the field as shown, then drag to the desired
location
– Be careful not to place one field on top of another
– Keep the field and field labels together
– Only fields in the custom area should be moved
559
Finalizing The Layout
Alignment Tools
– Allow objects to be
properly aligned
– Horizontally or Vertically
– Carefully select
appropriate fields for
alignment: <ctrl> click
– Toolbar buttons appear
in lower left corner when
two fields are selected
560
HELP: FormsDesigner > Object > Align Horizontally / Vertically
Set Tab Order
Speeds up copy-typing
from lists
Step 1
1. Sets the order in which
the cursor moves from
field to field when the user
tabs through them on a
page Step 2
2. Click on the fields in the
order required
3. When done select Save
and Exit Tab Mode Step 3
561
HELP: FormsDesigner > Edit > Set Tab Order
Saving Changes
With FormsDesigner Lite the only option is to
save cosmetic changes
– This does not affect the data in the database
– Log back in to System Administration and review the
results
WARNING: This presentation
does not cover the licensed
version of FormsDesigner. Use
of this product requires careful
consideration and attendance
on the Professional-Data class is
highly recommended before
use.
562
HELP: FormsDesigner > Edit > Save
OnGuard-Core
BASIC ALARM
CONFIGURATION
563
Basic Alarm Configurations
The display and behavior of each
alarm/event in alarm monitoring can be
adjusted through the alarm’s definition
Existing default alarms/events can be
adjusted and/or new custom alarms can be
configured
– Priority and priority color
– Must acknowledge
– Must enter a response when acknowledging
– Highlighting the alarm (Active alarm)
– And more….
564
Any configuration changes that
are made in any of the tabs from
the Alarm Configuration form in
System Administration, requires a
Refresh in Alarm Monitoring
In Alarm Monitoring, select
Options > Refresh Alarm
Configuration to ensure Alarm
Monitoring sees all updates made
to an alarm
565
‘System Type’ alarms/events are default alarms
– ‘User Type’ are custom created alarms/events covered on the
Professional-Access class
In System Administration select Monitoring >
Alarms…
566
Alarms may be prioritized
– 0 – 255 priority levels
– Higher the number = higher the priority
– Can be sorted by priority column in Alarm Monitoring
Alarms may be configured to have customized
attributes
– Use F1 (help) for feature information
567
The Priority tab allows for addition or
modification of display colours
– In the following example YELLOW will be used for
priority 125 – 174
– Different colours can be used for unacknowledged
and acknowledged alarms
568
OnGuard-Core
TIMEZONE READER MODE
569
Timezone Reader Modes
Controls the reader mode during the start and
end of a Timezone
The start and end reader mode will override the
current online mode of the reader
Assign only one Timezone to a reader
– Assigning more than one can produce instability
A newly created Timezone Reader mode will
work on the next Start or End time configured
– Example: if an 08:00 – 17:00 timezone is assigned to a reader
at 10:00, it will work next change reader mode at 17:00 and
then continue as configured
– Manually change the reader mode if a reader mode change is
required before the next start or end of the timezone(s) interval
570
Timezone Reader Modes
Click on Modify
Select Reader, Timezone, Start and End Mode
Click on the Assign button
Repeat as needed and click OK when finished
571
HELP: System Administration > Access Control > Timezones > Timezone/Reader Modes
OnGuard-Core
ACTION TYPES AND GROUPS
572
Action Groups Defined
An Action Group contains one or more Action
Types that will be executed (near) simultaneously
An Action Group Library contains one or more
Action Groups
– The Action Group created is listed in the Action Group
Library
System Administration User Guide – Appendix A
lists all the available Action Types
LS Linkage Server is required
573
Action Group Library
Action Groups can be used in other System
Administration features such as
– Scheduler
• Covered later in this class
– Global I/O
• Covered later in this class
– Note: User permissions can restrict the available

Actions that can be included
574
Action Group Library
Select Action Group Library under the
Administration program menu
Click on Add
575
HELP: System Administration > Administration > Action Group Library
Action Types
Click on Add to add the Action Type (s) to the
Group
Select the Action Type
576
Action Types
Select the corresponding components or features
for the selected Action Type
Click OK to save
577
Action Types
Tick the appropriate Monitor Zone(s)
– If Users needs to access them
Click OK
578
HELP: Selecting ‘Cancel’ will hide the Action Type from all Users.
Action Groups within Monitor Zones
Monitor Zones may be configured to include
Action Groups in the Alarm Monitoring system
tree
The Action Group may be directly executed
through right click menu, LS Linkage Server must
be configured and running
579
OnGuard-Core
SCHEDULER
580
Scheduler
Defines a schedule for either:
– Action Types
– Action Group
LS Linkage Server must be configured and
running
– Schedule does not reside on the Access Panel(s)
– If upstream communication is lost, scheduled item will
fail
581
Scheduler Configuration
May be launched from:
– System Administration >
Administration > Scheduler
• Scheduler for all objects
– Alarm Monitoring > View > Scheduler
• Scheduler for all objects
582
HELP: System Administration > Administration > Scheduler
Scheduler
Service Status indicates LS Linkage Server status
and Host Name is the computer running the
service
Time Zone selection shows current time in a
specific world time zone
– For reference purposes only
583
Scheduler
Click on Add
Select the Action Type or Action Group
– Select individual Action Type and then follow wizard
or select Action Group name
584
Scheduler
Schedule the Action
Type(s) or Action Group
– World Time Zone that
schedule time will be
based upon
– Select either
• One time with appropriate
date and time
• Recurring and click on
Change button to define
schedule
Schedule can be Disabled
using checkbox
585
Scheduler
Schedule the Occurrence
– Daily, weekly, monthly
Schedule the Frequency
– Occurs once or Occurs
every quantity of minutes
or hours, starting at and
ending at specific times
Schedule the Duration
– Start and end date
Click OK
586
Scheduler and Alarm Monitoring
Scheduler will attempt to perform configured
action at scheduled time
– Failure will be logged and may be examined by right
clicking on scheduled item
– If a single item in the schedule fails to execute a
failure will report
• View action history
• View current status
• Refresh action
587
OnGuard-Core
LOCAL I/O – FUNCTION LISTS
588
Local I/O – Function Lists
Local I/Os automatically trigger
specified output action(s) within a
Function List, when a specified event
occurs
Local I/Os are confined to a single
access panel
– They do not span across multiple ISCs
Function Lists are configured per
access panel
– Up to 100 Function Lists are supported
per ISC
– These are stored in the OnGuard
Database and held in ISC memory
589
HELP: System Administration > Access Control > Local I/O
Functions available from topics covered in this class:
– Activating alarm panel outputs
• Activate, Deactivate or Pulse Outputs
– Activating reader outputs
• Activate, Deactivate or Pulse Outputs
– Unlocking readers or setting reader mode
– Timezone Activate/Deactivate
• Change the status of a timezone, next interval change will update status
– Timezone Override
• Change the status of a timezone, next interval s will not update status
– All Reader Lock/Set Mode
• All readers controlled by ISC will move to the mode specified for the duration
selected
– Dialing back to the host computer when upstream communication for
access panels is set to dialup
• Only used with Modem based ISC, causes dial-back and database synchronization
590
Functions available beyond the scope of this class:
– Masking/unmasking of alarm groups
• Alarm Mask Groups must be built
– Opening/closing areas
• Local Areas must exist
– Activating Two Man Area Control
• Local Areas must exist
– Testing for active alarms in alarm group
• Used in conjunction with Alarm Group unmasking to provide intrusion detection panel
functionality
– Intrusion Mask Group Force Arm Away
• Used to schedule automatic arming of Intrusion Groups
Chain Lists:
– Chaining multiple function lists together
• Use if 6 functions are insufficient
591
Once the Function is selected then a
corresponding Argument(s) must be selected
Up to six (6) functions can be selected per List
592
Take note of the Function Behavior box listed in
the configuration form
– Set True
– Set False
– Pulse
593
All Reader Lock/Set Mode behavior
– Set true
• Sets all readers on the controller to Locked for the time
specified in argument 2
– Set false
• Sets all readers on the controller to the mode selected in
argument 1 for the time specified in argument 2
– Set pulse argument 1 mode selected
• Set all readers on the controller back to the online mode
configured in the reader configuration plus any timezone
changes
Note: The reader mode may be manually changed in Alarm Monitoring.
This will remove the locked override mode of the reader and will return
the reader to the selected reader mode
594
Local I/O – Function Lists Example
Select Local I/O
under the Access
Control program
menu
Click on Add
Name the Function
Select the Access
Panel
595
Local I/O
Local I/Os may be executed via:
– Alarm Monitoring by right clicking on the Local I/O
and selecting Execute
– Device Linkage (second tab under Local I/O)
– Scheduler
• Action type: Execute Function List
– Command Programming*
– Instant Commands*
– Area count*
– Alarm mask group count*
– Alarm Acknowledgment*
* Not covered on this class
596
Local I/O
Device Linkage options include:
– All alarm points
• Inputs
• Door Forced Open
• Door Held Open
– Communications loss to downstream devices
– Host communication loss
• Loss in communication to workstation running the LS
Communication Server
– Access activity
– Cabinet Tampers
– Power Failure
597
Local I/O
Input actions on state change can be configured
to
– Do nothing
– Set true
– Set false
– Pulse
Based on the Function Behavior box on the
Function Lists tab
598
Local I/O
Select Access panel from the drop down list on
the second tab under Local I/O
Select a Device on the left side
Select a Function List on the right side
Click on the Link button
599
Local I/O
Select the appropriate Logical Event
– Each Logical Event can be linked to only one Function List
Select the appropriate Take Action(s)
– Do Nothing
– Set False
– Set True
– Pulse
Click OK
600
Local I/O
Device and Function are linked
To Modify or Remove the link, click on the link to
access the Modify Link or Remove Link buttons
– Double clicking on the link opens the tree to display specifics
contained within the link
601
Local I/O and Alarm Monitoring
Activate the Device (Input) to trigger the Function
List and view results in Alarm Monitoring
Activate the Function List manually by right
clicking on the function in the System Tree
602
OnGuard-Core
GLOBAL I/O
603
Global I/O
Global I/O functionality allows linkage between
Access Panels and downstream devices system
wide
– Configuration includes
• Global Linkage
• Input Event
• Output Action
– Utilizes the LS Linkage Server for Global I/O
execution
• Global I/Os are not resident on the Access Panels
• Global I/Os are server based
604
HELP: System Administration > Access Control > Global I/O
Global I/O
Select Global I/O under Access Control program
menu
Click on Add and enter a Name
605
Global I/O
Global Linkage
– World Time Zone
• Defines world time zone that the LS Linkage Server will
use to execute based on the OnGuard Timezone
assignment
– Timezone
• Defines allowable times when Global Linkage will execute
based on world time zone
– Always
– User defined
– Never – Could be used to disable Global I/O linkage
606
Global I/O
Event Timestamp Tolerance
– Sets a user specified timeout period for a linkage
which indicates how long after an input is activated it
will remain valid and can cause an output action
• 3 Minutes is the default time
607
Global I/O
Logic correlation time period
– When creating a linked alarm
event (And Logic), set this to the
maximum number of seconds
between each event occurring
• This is a rolling time limit where the
time period resets after each
correlating event occurs
• Valid range 1-999 seconds
– Defaults to 10 seconds
– If each event transaction occurs
within the logic correlation time,
the output action is triggered
608
HELP: Please note that events are correlated not the states of devices!
Global I/O ‘AND’ Practical Example
Strobe Output required for multiple Door Forced
Conditions
Door Forced
Output
Door Forced
Action
Output occurs if
Door Forced
all three doors

are forced open
within a user
(Door Forced in an example)
defined time limit
609
Global I/O - Input
Click on Add to add Input Event(s)
– Event is required
• May individually add more inputs to be linked to same
output action(s)
610
Global I/O - Input
Devices may be optionally assigned
– All field hardware
Badges may be optionally assigned
– One badge number per configuration
611
Global I/O - Input “Or” Logic
Any specified input event selection causes
generation the output event(s)
Default logic
612
Global I/O - Input “And” Logic
Requires two or more input (event) transactions
in a pre-configured time (Logic correlation time
period) in order to generate the output event(s)
– Not a state-based AND operation
• All inputs must report active, but do not have to remain active
• Inputs are ‘transaction’ based NOT ‘Alarm State’ based
613
Global I/O - Input “And / Or” Logic
Multi-layer AND/OR hierarchy may be created
– OR gates feeding an AND gate
– The AND gates feeding an OR gate
– Limited to OR-AND-OR relationship
614
Global I/O - Input Modifying Logic
Inputs may be dragged and dropped between
logic groups using a mouse
– As long as moving the input does not violate the logical
operation
• Example: There MUST always be at least 2 inputs in an
‘AND’ group
Logic groups may be deleted
– User will be prompted for keeping the inputs belonging to the
group
615
Global I/O – Output Actions
Click on Add to add
Output Action(s)
– Choices include
• Action Types
• Action Group Library
– Control action
• Action dependent on
selected item
Click OK to save Global
I/O
616
Global I/O – Additional Output Actions
Deactivate Badge
– Deactivates any badge
based on a specified Input
Event(s)
• New Badge Status
automatically assigned
• Use List Builder to add more
Badge Status values
617
Local I/O may be linked to Global I/O when
Execute Function List is selected for the Output
Action
– Execute: True
– Execute: False
– Execute: Pulse
618
Grant / Deny Action Type
Launches pop-up on any
access related event
Grant access or Deny
access to the output
action reader selected
NOTE: Two RIMs are
required one for reader the
other for the
stike/REX/Door contact
619
Generate Event
Custom text alarm generated in Alarm
Monitoring as an output action
– Useful for creating a custom alarm text for the
AND/OR linkage
620 620
Global I/O - Generate Event
Configuring event text
– Select configured text using dropdown
• Contents added in Text Library under Administration
– Events can be typed in the given area
• Automatically added to Text Library
621 621
Global I/O: Generate Event Text
Generate Event Text and Alarm Monitoring
Trigger Global I/O with Generate Event as an
Output Action to view the results
622 622
OnGuard-Core
ALARM MONITORING
ADDITIONAL FEATURES
623
Search bar for trees and lists
User may press ‘<ctrl> F’ to search hardware
trees or hardware lists in System Administration
and Alarm Monitoring
– An item in the system tree or list must be selected
Useful for finding devices by name in large
trees/lists
– Pressing F3 will take you to the next item in the list that
matches your criteria
624
Runaway Mode Behavior
Runaway mode (must be enabled for use)
– While in this state, the Communication Server stops
sending the runaway events to Alarm Monitoring
stations and to the database
• Events may optionally continue to log to the database
– Restores from Runaway after 10 seconds of no
events
625
HELP: System Administration > Administration > System Options > Runaway Detection
Runaway Detection (Cont.)
Detect runaway devices
– Enable the feature within
System Options tab
Number of events and time
interval evaluated as logical
AND
– Number of events
• Quantity of alarms that
occur from a single device
– Time interval
• Alarms occurring within the Setting applied to ALL
specified time interval
Log events to the database devices
– Will continue logging to the
database once in the
runaway detection mode
626
HELP: System Administration > Administration > System Options > Runaway Detection
File Program Menu
Switch Log On
– Used to switch OnGuard user without
closing out of Alarm Monitoring session
Change Password
627
HELP: System Administration > Applications > Switch Log On & Alarm Monitoring > File > Switch Log On
Edit Program Menu
Acknowledge Alarms
Fast/Group Acknowledge
– Shortcut = Ctrl + F12
Select All
– Shortcut = Ctrl + F11
628
HELP: Alarm Monitoring > Edit > Fast/Group Acknowledge/Select All or Ctrl F12/F12
View Program Menu
Badge Info is the Cardholder Form
System Status for tree
Pending Alarms window
629
HELP: Alarm Monitoring > View
View Program Menu
Cardholder Verification
Launches a window that will show
the image from the cardholder
record based on access activity at
a reader
– Any reader belonging to the monitor zone
may be chosen
– Multiple windows can be configured each
with different readers
Display will be based on the
access transaction from the
selected reader
– Access event and the cardholder name are
displayed
– Border color will be based per alarm
definition on alarm priority colors
630
HELP: Alarm Monitoring > View > Cardholder Verification
View Program Menu
Reports can be run within
Alarm Monitoring
– User Permission applies
– Reports will be covered later in
this class
631
HELP: Alarm Monitoring > View > Map
Trace Program Menu
Live traces can include Devices (hardware),
Badges, Monitor Zone
Historical traces can also be run with the time
and date selectable
Alarms can be filtered in the trace using the same
filter from the main window
Multiple traces may be run simultaneously
632
HELP: Alarm Monitoring > View > Trace
Tracing
Tracing
Badge ID trace
Badge, Device
and Controller
Trace
To initiate a trace Configuration
– Right-click mouse of
selected item Badge, Device, and
– Use the trace icon on the Controller Trace
toolbar Monitor
633
Trace Window Alarm Filtering
Alarm Filtering may be
configured by right Grouped and selectable by date
clicking on any column

title in any Trace
window
– Select all
– Individual items based
on column being filtered
Grouped and selectable by alarm description
634
Configure Program Menu
Alarm filter allows specific types of events to be
viewed
– The main alarm monitor window must be selected
635
HELP: Alarm Monitoring > Options > Alarm Filter
Configure Program Menu
Multiple hardware windows may be opened and
configured individually
Configure Column order and selection
Configure System Status Options
– Useful for troubleshooting devices
– Click on the System Tree window for feature
636
HELP: Alarm Monitoring (System Tree open) > Configure > Columns or System Status Options
Control Program Menu
Update All Hardware Status
– Refreshes System Tree
– Does not take hardware off line
Set All Controller Clocks
– Does not take hardware off line
637
HELP: Alarm Monitoring > Options > Update All Hardware Status
Options Program Menu
Mute Sound
– Prevents audio from playing on alarm
Change font of alarm
monitoring text
Save Alarms on Exit
– Displays current alarms when
program reopens
638
Save settings in Alarm
Monitor
– The settings can be saved on exit
or immediately
Alarm view
– Alarms can be set in either
ascending or descending order
– Time display can include seconds
Show alarms marked in
progress
– Alarms marked in progress can be
hidden from view in alarm
monitoring
639
Auto cardholder display for
access alarms
– Cardholder window with the
associated cardholder will display
with an access event
Options that control the
automatic display of objects
in response to alarm
configurations
– Automatic Map Display
• Will display the default map
associated with an event
640
Automatic…
– Cardholder display
• Will display the cardholder record
associated with the event
– Video Verification
• Will display the video verification window
– Visual Notification
• This enables Alarm Monitoring to take
focus from other programs that may be
running
– Automatic Live Video Display
• This displays a live video player from the
camera associated with the event device
– Launch Video for Active Alarm
• This will display video from an alarm at
the time the alarm was active as opposed
to the current time
641
PTZ Options
– These are options for controlling a
camera with pan tilt and zoom (PTZ)
capabilities. This is discussed in the
PRO-VIDEO class
Display status on maps
– Device information other than the
device name will be displayed on the
map
Highlight entire row
– This will highlight the entire row rather
than the first column for an active alarm
642
Disable command verification
– This will prevent successful notifications
from being displayed
Execute command on single-
click of icon
– This changes the option to execute
commands from double click to single
click
Display controller capacity
– This will display additional controller
information in the system hardware
643
Display device firmware
revisions
– This will display the firmware revision
for devices other than access panels
Display device serial numbers
– This will display serial numbers of
devices in the monitor zone
Refresh alarm configuration
– This will force the refresh of the alarm
configuration
644
LNL Downstream boards (RIM and AP)
Board/module Series is indicated in status of
Alarm Monitoring System Tree
Can be disabled under Options in Alarm

Monitoring
Used to identify legacy hardware where updating

may be required for future feature support
645
OnGuard-Core
EVENT ARCHIVING
646
Archiving and Restoring History
AccessControl Database
– Non-history data
– Transactional (history)
data
History older than

threshold is either:
– Deleted
– Archived
647
Archiving History
- OR -
Archival Database
(7.0 or later)
648
Archiving – to shared folder
Archiving is the process of moving
records from the database to a text file
(.txt) located in the specified path
– Useful for maintaining the size of the database
– Records can be restored to run reports on
archived data
• These records are copied into “_restored” tables in
the database to prevent writing over live data tables
– Scheduler feature in OnGuard should be used to
automate the process
• Requires LS Linkage Server
– Default archiving timeframe is records older than
180 days
649
HELP: Alarm Monitoring > Administration > Archives
The archive window will
define the following
– Whether records will be archived
to disk or purged
– Defines how long records will
remain in the database
• Default is 180 days
– Add a suitable folder on a storage – Review the record
location (via File Explorer) then counts based on the
browse to this location archive settings
• Make sure this folder can be chosen
accessed by the user’s Window – Option for manual
account purging of data to
archive files
650
Archive Specific Event Types
– Each of the event and alarm acknowledgements can have their
own archive settings
– Select radio button “Archive specific event types”
651
Archived records are stored as text files (.txt)
– These records should be stored in a secure location
– The records are date stamped and includes archive type
(Events, User Trans, etc.) as part of the file name
652
Restoring History – from shared folder
History must be restored to
Database if needed
Shared Folder
653
Restoring Records – from shared folder
Shared folder records must be restored before
reports can be run on that data
– The appropriate archive must be chosen
– That archive must be restored to the database
– When running the report, the Use archived records checkbox
MUST be chosen
– Reports cannot be run on live and archived data
simultaneously
654
HELP: Alarm Monitoring > Administration > Reports
Management of shared folder Archives
Archive management includes
– Deletion of obsolete archive files
– Restoring of archived records to the database for reporting
purposes
– Deleting the restored records from the database
– Viewing current or deleted archive files
655
HELP: Alarm Monitoring > Administration > Archives > Restoring
Archiving – to Database
Preparation
– Delete any Restored Archives shown within the
Restoring Tab
656
Archiving – to Database
Within the Archiving tab select
– Archive to database
– Provide Database name
• For OnGuard 7.0 must be named
– ‘AccessControl_Archival’
– And already exist
– From OnGuard 7.0 SP1 and later Setup Assistant will

create the required database in the same instant on SQL
that the main database resides in if Assisted Set-up for
SQL was selected at installation
657
Archive (Database) Management
Archive management includes
– Purge the archived records from the archive database when
required
• Cannot be scheduled
– Viewing database size and availability status
658
Archive Scheduling
Scheduling Automatic Archiving
– LS Linkage Server is required
– Output action is ‘Archive/Purge Live Database’
– Set for recurring interval as appropriate
[Scheduling is covered in more detail on

the Professional-Access Class]
659
Restoring from file via Database
If Archive files had been created then Archiving
by Database is selected, to view the archive file
restore file to the Archive database then run
reports from the archive database
Once restored to the Archival Database the
restored records will be managed by the purging
interval of the Archive database
Once an Archive text file has been restored to the
Archive Database it can be deleted via the
Restoring tab
660
OnGuard-Core
REPORTS
661
Cardholder Reports
Cardholder reports
– Cardholder reports can be run based on a cardholder search
– ‘Limit report to current search’ checkbox is enabled by default
662
HELP: System Administration > Administration > Cardholders > Reports
Cardholder Reports
Only reports assign to the user via Reports
Permission Group will be initially viewable in the
Report list
– ‘Display unauthorized reports’ checkbox can be enabled
to view all reports
663
HELP: System Administration > Administration > Cardholders > Reports
Cardholder Reports
Cardholder reports
– Select report and click on Print
– Select Preview, Export, or Print
664
HELP: System Administration > Administration > Cardholders > Reports [Print]
System Reports
Reports are available from System Administration
or Alarm Monitoring
Approximately 150 default reports in OnGuard
665
HELP: Alarm Monitoring > View > Reports or System Administration > Administration > Reports
System Reports
System Reports include the following:
– The ability to search within a report
– The ability to export reports to other file formats
– A customizable report description
– Reports may be run against live data or archived records
separately
• Enable checkbox at the bottom to ‘Use archived records’
Through User Permissions, displaying specific

reports can be limited
– Reports Permission Group
666
Reports
Filter Report View
– Allows the filtering of report view by type
Display unauthorized reports checkbox
– Display reports not assigned to user via Report Permission
Group
667
HELP: Alarm Monitoring > View > Reports or System Administration > Administration > Reports [Filter Report View]
Reports Types
Report Configuration tab
– Used to password protect, delete or add new
Report Template files
Report tabs
– Use to apply filters to the data to be provided in
selected reports
System configuration reports are useful for

documenting and recoding an installation
configuration
668
HELP: Alarm Monitoring > View > Reports or System Administration > Administration > Reports
Report Filtering
Each report tab has filtering capabilities to refine
the desired report
Filtering options include
– Date and Time
– Cardholder
– Reader, Alarm Panel, Access Panel
– Text
– Events
669
HELP: Alarm Monitoring > View > Reports or System Administration > Administration > Reports > (several tabs)
Previewing Reports
Find
Export
Page
Forward/Back
670
HELP: Alarm Monitoring > View > Reports or System Administration > Administration > Reports [Print/Preview]
Report Output
Report may be:
– Exported
• Data may be exported to
– Disk file
» .PDF
» .XLS
» .CSV
» .XML
» .RTF
» .RPT
– Printed
671
Scheduling of Reports
Automatic reports can be scheduled and sent to a
printer or attached to an email
File attached to email

– Requires configuration of LS Linkage Server
– Requires configuration of LS Global Output Server
• See Professional-Access class
672
Customizing Reports
A run-time version of Crystal Reports is included
with OnGuard
To customize reports, the full version of Crystal
reports is required
– OnGuard 7.4 utilizes Crystal Reports XI
An introduction to customized reports using
Crystal Reports is covered in the Professional-
Data class
673
OnGuard-Core
SINGLE SIGN-ON
674
Logon Options
OnGuard Internal account
– Username and Password created in OnGuard are
required credentials for log in
Auto Single Sign-On
– Automatically signs OnGuard user in, based on
linked directory credentials
Manual Single Sign-On
– Uses same directory as Auto Single Sign-on
– Allows the option of logging in using the directory or
an internal account credentials
675
Internal Account
The Internal Account is the credential used for
regular OnGuard log on
676
Auto Single Sign-On
Launch the Logon window
– Open OnGuard Application
– Log on to OnGuard using key icon or menu option
– Auto Logon will be started
• Press the Shift Key to bypass Auto Logon and log in
manually
677
Single Sign-On Configuration
Associate Directory
– Lightweight Directory Access
Protocol
– Microsoft Active Directory
• (See later in this class)
– Microsoft NT4 Domain
• (Use for Workgroup in Win 10)
– Windows Local Accounts
Configure authentication method
(if required)
– Anonymous (use for Workgroups)
– Current Windows account
– Explicit (use for Domains)
678
Single Sign-On Configuration
Link Directory Account to OnGuard User
679
Manual Single Sign-On
Click the “Options >>” button to be given the
ability to choose between logging in using the
internal account or the directory account
(manually).
– Deselecting the “Allow manual single sign-on” check
box in the directory form will prevent the directory
from displaying in the log on directory drop-down
box.
680
Single Sign-On
Advantages of using Single Sign On
– Enhanced password policy enforcement via
directory
• Password expirations and changes
• Complexity requirements (special characters, minimum
length, upper/lower case, etc.)
– Convenience or ease of access to OnGuard
applications
Considerations when using Single Sign On
– Security risk if user fails to log out of Windows
– User permission for Windows logout upon (Alarm)
Monitoring logout is available
681
OnGuard-Core
ONGUARD MODULES
682
OnGuard Modules Introduction
An awareness of OnGuard Modules is a
requirement of Associate certification
Modules may be added to size of OnGuard
system from ES to Enterprise
683
OnGuard Modules Introduction
OnGuard Modules (browser-based) clients
– Updated or same with 7.4 release:
• Credentials
• Policies
• WATCH (and Lite version)
• Visitor and Cardholder Self-Service
– New with 7.4 release:
• Monitor
• Access Manager
– Replaces Legacy Area Access Manager
– More information follows
684
OnGuard Module Installation
An appropriate Module license is required
– Annual Subscription license
Download Module zip from
http://partner.lenel.com
LS OpenAccess Service must be running
Install with full Administrator rights on the
OnGuard Server
Launch the Module Webpage from any location
via the Lenel Console
https://server:8080
685
OnGuard Module Compatibility
Browser Compatibility
– Consult the release notes for the specific Browsers
that are supported for each Module
Languages
– Consult the release notes for the specific languages
that are supported for each Module
OnGuard Version
– Consult the release notes for each Module for
earliest version of OnGuard that is supported
686
OnGuard Module Installation Example
Example Module Installation
– Install with Administration rights on OnGuard Server
– Some Modules will ask for additional information,

please read the instructions carefully and double-
check the data that you provide is accurate
687
OnGuard Credentials
What it does:
– Webpage access to
OnGuard cardholder
records
• Add / Modify / Delete
• Photo capture
• User defined tabs (via
FormsDesigner)
– Webpage access to
OnGuard cardholder
badges
• Add / Modify / Delete
• Assign Access rights
– Intuitive search tool
– Intuitive bulk-modify tool
688
OnGuard Credentials
• Cardholder to Active
Directory Link
• Saved Searches and
Preferences
• Segment Filter
• Cardholder list printing
option
It does not replace all
functions of ID Credential
Center thick client
689
OnGuard Monitor
What it does:
– Provides limited* web-based Alarm Monitoring
capability for OnGuard
– Features at this release:
• Alarm Queue View & Manage
• Hardware View & Control
– Access Hardware ONLY
• Verify Cardholders (not modify)
• Customize Screen Layouts
– Saved views
– User Settings/Preference
– Will replace OnGuard Mobile Monitoring Application
*Intended for light use only when mobility is the key objective
690
OnGuard Monitor; Monitor Zones
Monitor Zone’s for Monitor
– Build a custom Monitor Zone that contains only
devices and events to be managed via the Monitor
Module
• Webpages cannot handle the processing speed of the
Alarm Monitoring Client
– Alert message if no Alarm Monitoring zone exists
691
OnGuard Monitor Operation
Default Views
– Alarm Alarms
– Badge/Access Alarms Only
– Non-Badge/Access Alarms
– Pending
• Not available in release 1
– Hardware Tree
Monitor Zone selection
from Gearwheel
692
Dynamic Alarm Filter
Log off
Live or
Historical
Trace
Views Selection
Custom
View
Pending/ Column Selector
Layouts
Acknowledgement Actions for Alarm
status Alarm Name or hardware
Alarm Priority
Monitor Zone
Selection
Alarm Selection(s) for
multiple Alarm Actions
693
Badge/Access Alarms
– Additional cardholder information Available
694
Hardware Tree View
Status Ribbon
Dynamic Device Filter
Status Summary
and hide status
Hardware
Control
menu
Expand/Shrink Device Status, Operation mode, Alarms

hierarchy waiting counters and Device name
695
New Views Layout
– ‘Custom’ to select existing custom
views
– ‘New Layout’ to build View Widgets
View Widgets
– Alarm Queue Views
• Live or Historical Trace
– Hardware Tree
– Readers (Doors)
696
OnGuard Monitor Custom Layouts
Select Custom > New Layout
– Provide suitable name
Provide name for Widget
– Select Widget Type
697
Alarm Type Widget
– Provide a suitable name
– Select types of alarms to
include
• All Alarms
• Badge Only
• Non-Badge
– Select a Date range for
historical Traces or
remove date for live
698
Hardware Type Widget
699
Cardholder Verify Type
Widget
700
Custom View Layout
– Rearrange Widgets by dragging tabs around
Browser
– Save by changing view and select ‘SAVE AND
CLOSE’ when prompted
– Widget can be sent to
new Browser Window
701
Adding more Widgets to Layout
– Use the (+) button at the top-right of each existing
Widget window
702
OnGuard WATCH
What it does:
– A web-based analysis tool that
collects system data and displays
it on customizable, user-friendly
dashboards
– OnGuard WATCH - Web Access
Trending & Comprehensive Health
Legacy LITE version available
– Cannot co-exist on same Server
with WATCH
703
OnGuard WATCH
WATCH data Collection and
Preparation Services are
added
– These services must remain
running
Install WATCH on all remote
servers (if there is more
than one)
– All LS Comms Servers
– Separate Database Server
704
OnGuard WATCH
• Archive date-driven metrics
– Saves disk space
– Action Frequency:
» One-time action
» Recurring schedule
Archiving
– Purging option (cannot be
restored)
• Import data into the
OnGuard WATCH database
that was previously archived
in order to view and analyse
historical metrics and trends
• Only data from the same
system may be imported
705
OnGuard Policies
What it does:
– Used to confirm that Access Levels and
usable doors are correctly assigned to
cardholder’s badges using one or more
criteria
– Update badges automatically to conform
with policies
– Observe violations and manually update
badges to conform with policies
– Ideally used by one user at a time to avoid
policy conflicts being implemented
706
OnGuard Policies Users
Policies Users
– The Users of Policies
must have permission
assigned to them via
> Administration >
Users > System
Permission Groups >
OnGuard Policies
707
OnGuard Cardholder Self Service
What it does:
– Empower the cardholders to self-manage
their access rights by allowing:
• Reviewing their Access Denied events
• Requesting access to doors over specific durations
• Change their PIN
– Manual, Random and uniqueness
– If the OnGuard system requires a random PIN user supplied
data is ignored
• Removal of Approval pages
– Use (New) Access Manager instead
708
OnGuard Cardholder Self Service
– Alerts driven by email messages
between cardholder and approver
(Access Manager users)
– Configuration menu only available
to Administrators (OnGuard users)
– Cardholders must be linked to a
Domain accounts
– Partners with Access Manager
Module for approvals
709
OnGuard Access Manager
What it does:
– Graphics tile-based matrix of Access Levels
available each showing number of badges
using it
– Filter and Search for Access Levels
– Assign Access level to badge
– Remove Access level from badge
– Bulk updates to multiple badges
– Approve/Deny Access Request sent via
OnGuard Cardholder Self-Service (CSS)
710
Access Manager Users
– The Users for Access
Manager must have
Access Levels
assigned to them via
> Administration >
Users > Area Access
Manager Levels
These permissions are shared with ‘Area Access

Manager’ Thick and Thin clients
711
Standard View Dynamic Filter Add/Remove from badges
CSS Approvals
Requests view
Select Access Level(s) to add/remove from badges
Menu
Collapse Number of badges assigned this Access Level
712
Appling Access Levels
– Click on slider next to cardholder
• Green = Will be or is applied
• Grey = Will be removed or is removed
– Click on Set+ to apply start/end dates
– Select Start and End date
• Note graphical span of valid dates
– Type in Start and End time
• Press APPLY to save
If cardholder has more than one active

badge click on badges to apply/remove
to/from each individual badge
713
Cardholder Self Service (CSS) Requests
– Access Status
• Submitted - when the request is unattended by the Approver
• Approved - When the request is approved by the approver
• On Hold - When the request is kept on-hold by the Approver
• Denied - When the request is denied by the Approver
Dynamic Search
– Actions
• Approve
• Hold
• Deny
714
OnGuard Visitor Self-Service (VSS)
What it does:
– Provides welcoming
visitor experience via an
iPad Application for
visitor’s to use on arrival
to sign themselves in or
No charge from the
on departure to sign Apple® App store*
themselves out
Download directly to
– Photo capture support iPad(s)
– Email barcode scanning *OnGuard license is
support to identify visitor required
715
OnGuard Visitor Self-Service
Booking Visitor’s Appointments
– Available via Cardholder Self-Service Module
– Also available via legacy:
• IDVMHost Webpage
– FrontDesk Module for Receptionist
– Visits within OnGuard ID Credential Center client
– For more information please attend the

Professional-Data class
716
OnGuard Modules in EMEA
Attending the following classes will provide
hands-on training to the Modules listed:
– Professional-Access:
• Policies
• Credentials
• Monitor
• Access Manager
• Credential Self-Service Introduction
– Professional-Data
• Credential Self-Service
• Visitor Self-Service
• WATCH Course content can change without notice
WATCH Lite is no longer taught due to pending obsolesce

717
Certification Testing Center
Follow the link within email sent to you
http://lenel.proexams.com
You can pause the exam and return to answer
more questions later or change earlier answers
Don’t forget to submit the exam within 30 days
718
HELP: http://lenel.proexams.com
Upon Completion of Class
You have 30 days to complete the exam
– 70% for a Pass
– 80% if not passed first time
– 80% if not passed second time
After passing the Associate exam you will
automatically be registered for access to the
tech support web page
Training licenses can be renewed provided
your certification is current
Practice, Practice Practice !
719
Thank you for your
attendance
Please make sure to take all personal items

with you. Leave badges on your desk.
720

ONGuard Core Training

Diunggah oleh

Informasi Dokumen

Hak Cipta

Format Tersedia

Bagikan dokumen Ini

Bagikan atau Tanam Dokumen

Opsi Berbagi

Apakah menurut Anda dokumen ini bermanfaat?

Apakah konten ini tidak pantas?

Hak Cipta:

Format Tersedia

ONGuard Core Training

Diunggah oleh

Hak Cipta:

Format Tersedia

OnGuard-Core

OnGuard-Core 7.4 EMEA Feb 2018

– Navigation – Basic Alarm Configuration

Select the discipline

Updated telephone numbers may be

Subject to change without notice

Thick Clients Thin (Webpage) clients

7.1 September 2015 September 2018

– Guaranteed support is no longer available for older

Only SQL versions that are supported for use

Visit http://partner.lenel.com for list of approved

• Microsoft Edge: Evergreen browser

Comparison of components installed for a System Tools

Select Database and

Extracting the file will begin

A-Z, a-z, 0-9,

Some required installations will need a reboot

In general the use of System

Windows Services view

– Adjust service ‘log on as’ in client Workstation

– Carefully and accurately follow the procedure

THICK CLIENTS, UPGRADES

*Class content is subject to change without notice

Check ODBC connection for correct Server

Light tile color

– Reference Chapter 11 of System installation User

Icon Indicator Key:

LS Client Update Service must be set to Automatic

LNL-200XA LNL-400XA LNL-600XA

Also available without Power Supplies

Use one of these

Module layout examples follow

– A: LNL-1100(-S3), LNL-1200(-S3), LNL-1320(-S3), LNL-

– E: LNL-1000, LNL-1100(-S3), LNL-1200 (-S3), LNL-

when LAN is primary Upstream

Downstream Devices Downstream Devices

If using the LNL-1300e as a downstream device a

Bond one end to Earth only

Output Diode is located close to the

Typical output circuit with DC

– LED A or 1 – Power (blinks rapidly)

*(Series 2 Controllers have additional LEDs for

Visit http://elearning.lenel.com for further education

ACCESS PANELS OR ISC’S

LNL-4420 No Direct No Yes Ethernet 50,000 Yes

1 When not using downstream support capability, otherwise 1

– LNL-3300 RS232/485 Built-in Ethernet

– Only one port is active

LNL-1100 LNL-1200 LNL-1300e

Number of Auxiliary Number of Auxiliary

Note: DIP Switches

1 Current limited power for external load including reader(s)

1 Current limited power for external load including reader(s)

1 Current limited power for external load including reader(s)

LNL-1320 capabilities plus: LNL-1320 capabilities plus:

1 Requires LNL-4420 as the ISC, used by US Government

Connect shield to Earth Point

PSU RIM Reader

Please review these documents now

*OnGuard Compatible Firmware

Attend Specialized classes for information and

OnGuard License required

HOLIDAYS AND TIMEZONES

08:00 Timezone Interval 16:59